DF-5086
AcpiOsFree forwards NULL to _kfree which panics ("trying to free NULL pointer") β latent NULL-free panic unique to the DragonFly port (Linux/FreeBSD kfree(NULL) are no-ops)
Summary
The OSL was ported onto an allocator with different NULL semantics; all current callers guard, so latent - any future ACPICA sync or driver error path that frees an unallocated buffer becomes a panic. One-line guard fix.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-5086 Β· 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 945 B | view raw |
Fix verification
not_testablebaseline noβ patch + rebuild βpatched clean
per-fix-DF-5086
Confirmed kernel references
Detail
Evidence (decisive lines)
code-trace proof in finding markdown (path:line)
Verified recommended fix
see finding markdown
Verdict
untested (Low/Info hardening; no unprivileged trigger or hardware-gated)
No comments yet.