DragonFlyBSD Kernel Audit
DF-0021 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-0021 PoC run script — loads the kernel module as root.
# On a BUGGY kernel: kmalloc_usable_size prints 0xffffffff80000000 (overflow).
# On a FIXED kernel: kmalloc_usable_size prints 0x0000000080000000 (correct).
#
# This is a root→kernel module trigger (kldload). The bug is LATENT: no
# unprivileged kernel interface is known to issue a >= 2 GiB kmalloc.
set -e
cd "$(dirname "$0")"
echo "Loading poc_shift.ko (requires root)..."
kldload ./poc_shift.ko
echo "---"
echo "dmesg output:"
dmesg | grep "poc:" | tail -6