⬢ DragonFlyBSD Kernel Audit
DF-5506 / run_fixed.log
← back to finding ↓ download raw
AMDH: BEGIN amdsmb production-code harness
AMDH T0 sanity: rc=0 count=32 buf[0..3]=b0 b1 b2 b3 (expect rc=0 count=32 data=B0 B1 B2 B3)
AMDH T0: PASS
AMDH T1 wedge_prtcl: rc=32 (BUG: expect 0=ENOERR, correct would be 32=ETIMEOUT) count=32 elapsed=5440ms busy_polls=10002
AMDH T1 data: buf[0..3]=aa aa aa aa (STALE T0 bytes if 0xB0..) stale_0xAA=64
AMDH T1: NOT reproduced
unknown: timeout waiting for IBF to clear
AMDH T2 wedge_ibf: ec_read rc=1 (BUG: expect 0; correct would be 1) val=0x00 sc_reads=501 (500-poll budget exhausted, write proceeded anyway)
AMDH T2: NOT reproduced
unknown: timeout waiting for OBF to set
AMDH T2b wedge_obf: ec_read rc=1 (BUG: expect 0; correct would be 1) val=0x00 (STALE byte 0x5C accepted as SMB_BCNT!) sc_reads=503
AMDH T2b: NOT reproduced
AMDH T3 uninit-caller-count truth table (smb.c:317 bcount is uninit; len=32 healthy slave):
AMDH T3 g=  0 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3 g=  1 -> rc=0 count=1 stale_0xAA_bytes_in_out=0 (kernel-stack bytes smbioctl would copyout: 0)
AMDH T3 g=  5 -> rc=0 count=5 stale_0xAA_bytes_in_out=0 (kernel-stack bytes smbioctl would copyout: 0)
AMDH T3 g= 31 -> rc=0 count=31 stale_0xAA_bytes_in_out=0 (kernel-stack bytes smbioctl would copyout: 0)
AMDH T3 g= 32 -> rc=0 count=32 stale_0xAA_bytes_in_out=0 (kernel-stack bytes smbioctl would copyout: 0)
AMDH T3 g= 33 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3 g=255 -> rc=256 SMB_EINVAL: SMB_BREAD fails, feature dead for this stack byte
AMDH T3w: bwrite with garbage count -> wire BCNT value:
AMDH T3w g=  0 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T3w g=  1 -> rc=0 transmitted_BCNT=0x01 (garbage length put on the wire)
AMDH T3w g=  5 -> rc=0 transmitted_BCNT=0x05 (garbage length put on the wire)
AMDH T3w g= 31 -> rc=0 transmitted_BCNT=0x1f (garbage length put on the wire)
AMDH T3w g= 32 -> rc=0 transmitted_BCNT=0x20 (garbage length put on the wire)
AMDH T3w g= 33 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T3w g=255 -> rc=256 transmitted_BCNT=0x00 (rejected before wire)
AMDH T4 (known DF-1091): rc=0 count=32 highest register index read=0x24 (bank ends 0x27)
AMDH: END (3 harness self-failure(s))