β¬’ DragonFlyBSD Kernel Audit
← triage Β· dashboard
DF-5387

Read pipeline issues STOP despite SMB_TRANS_NOSTOP β€” chained I2C reads of >=2 bytes are terminated early

Summary

The rcount==2 pipeline allowance sets IG4_DATA_STOP without testing NOSTOP (the initial allowance and the write path both test it - intent proven): chained reads >=2 bytes get a premature STOP, follow-up chained transactions start with an unexpected fresh START, multi-part reads desync. Honor-NOSTOP fix.

Discussion (0)

No comments yet.

PoC verification

Evidence pack

findings/poc/DF-5387 Β· 1 files
FileTypeDescriptionSize
verdict.json file 1.0 KB view raw

Fix verification

not_testable
baseline no→ patch + rebuild →patched clean
per-fix-DF-5387

Confirmed kernel references

Detail

Evidence (decisive lines)

wire-level source proof vs SMBus 2.0 spec + ig4_reg.h documented abort/flush semantics

Verified recommended fix

see finding markdown

Verdict

untested (hardware-gated: no Intel LPSS I2C model in QEMU; pm SMBus is ichsmb, ACPI-injected fakes fail the COMP_VER gate)