DragonFlyBSD Kernel Audit
← triage · dashboard
DF-2390

Boot-time kernel panic from inconsistent DPF handling between resource counter and link_add_crs

Summary

acpi_count_irq_resources tolerates second START_DEPENDENT resource by transitioning to DPF_IGNORE (no panic) so _CRS containing nested dependent-function groups counted successfully and pl_links allocated. link_add_prs also tolerates it. But link_add_crs panic()s on second START_DEPENDENT. Malformed/buggy _CRS passes counting walk drives allocation then panics kernel during attach. Two walks over same _CRS disagree on whether nested DPF acceptable. No memory-corruption only unconditional kernel panic during ACPI PCI link attach (boot). Impact: DoS system fails to boot.

Discussion (0)

No comments yet.