β¬’ DragonFlyBSD Kernel Audit
← triage Β· dashboard
DF-5039

os_map_pci_bar(): unchecked bus_alloc_resource() failure β†’ rman_get_virtual(NULL) NULL-deref panic at device probe

Summary

Both BAR branches never check bus_alloc_resource; the MEMORY branch immediately derefs via the raw rman_get_virtual macro ((r)->r_virtual) - unconditional NULL deref panic at attach; the IOPORT branch survives until the unguarded bus_release_resource in os_unmap_pci_bar. Hardware-gated (no 0x1103 PCI device on guest; driver in-kernel, never attaches). NULL-check + guarded-release fix.

Discussion (0)

No comments yet.

PoC verification

Evidence pack

findings/poc/DF-5039 Β· 1 files
FileTypeDescriptionSize
verdict.json file 964 B view raw

Fix verification

not_testable
baseline no→ patch + rebuild →patched clean
per-fix-DF-5039

Confirmed kernel references

Detail

Evidence (decisive lines)

source-level analysis in finding markdown + guest hardware-gate probe

Verified recommended fix

see finding markdown

Verdict

untested (hardware-gated: no HighPoint RR27xx on audit guest)