DF-5039
os_map_pci_bar(): unchecked bus_alloc_resource() failure β rman_get_virtual(NULL) NULL-deref panic at device probe
Summary
Both BAR branches never check bus_alloc_resource; the MEMORY branch immediately derefs via the raw rman_get_virtual macro ((r)->r_virtual) - unconditional NULL deref panic at attach; the IOPORT branch survives until the unguarded bus_release_resource in os_unmap_pci_bar. Hardware-gated (no 0x1103 PCI device on guest; driver in-kernel, never attaches). NULL-check + guarded-release fix.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-5039 Β· 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 964 B | view raw |
Fix verification
not_testablebaseline noβ patch + rebuild βpatched clean
per-fix-DF-5039
Confirmed kernel references
Detail
Evidence (decisive lines)
source-level analysis in finding markdown + guest hardware-gate probe
Verified recommended fix
see finding markdown
Verdict
untested (hardware-gated: no HighPoint RR27xx on audit guest)
No comments yet.