⬢ DragonFlyBSD Kernel Audit
DF-5590 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
{
  "finding_id": "DF-5590",
  "title": "isavga_attach() discards bus_alloc_resource() results and never unwinds the legacy VGA window claims on attach failure (no detach method exists either)",
  "verdict": "inconclusive",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "./build.sh  (no compile — introspection harness)",
    "run": "./run.sh",
    "expected": "baseline: 'vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa1' plus devinfo -rv showing both rman claims; the leak itself requires a BIOS boot with no VGA decode (not expressible on this rig)"
  },
  "kernel_refs": [
    "sys/bus/isa/vga_isa.c:144-148",
    "sys/bus/isa/vga_isa.c:150-152",
    "sys/bus/isa/vga_isa.c:156-160",
    "sys/bus/isa/vga_isa.c:66-74",
    "sys/dev/video/fb/vga.c:838-853",
    "sys/dev/video/fb/vga.c:855-859",
    "sys/kern/subr_bus.c:2693-2711"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "introspect.sh", "build.sh", "run.sh",
    "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"
  ]
}