β¬’ DragonFlyBSD Kernel Audit
← triage Β· dashboard
DF-5085

AcpiOsMapMemory's NULL failure contract is dead code β€” pmap_mapdev panics on KVA exhaustion instead of returning NULL, converting ACPICA's graceful AE_NO_MEMORY degradation into an unrecoverable kernel panic with firmware/AML-controlled mapping volume

Summary

The NULL check is unreachable (pmap_mapdev panics on kmem_alloc_nofault==0) while ACPICA's exregion explicitly handles NULL as AE_NO_MEMORY - firmware-controlled SystemMemory opregion volume or KVA pressure bricks instead of degrading. Fallible-mapping fix sketched.

Discussion (0)

No comments yet.

PoC verification

Evidence pack

findings/poc/DF-5085 Β· 1 files
FileTypeDescriptionSize
verdict.json file 946 B view raw

Fix verification

not_testable
baseline no→ patch + rebuild →patched clean
per-fix-DF-5085

Confirmed kernel references

Detail

Evidence (decisive lines)

code-trace proof in finding markdown (path:line)

Verified recommended fix

see finding markdown

Verdict

untested (Low/Info hardening; no unprivileged trigger or hardware-gated)