DF-0021 / run.sh
#!/bin/sh # DF-0021 PoC run script — loads the kernel module as root. # On a BUGGY kernel: kmalloc_usable_size prints 0xffffffff80000000 (overflow). # On a FIXED kernel: kmalloc_usable_size prints 0x0000000080000000 (correct). # # This is a root→kernel module trigger (kldload). The bug is LATENT: no # unprivileged kernel interface is known to issue a >= 2 GiB kmalloc. set -e cd "$(dirname "$0")" echo "Loading poc_shift.ko (requires root)..." kldload ./poc_shift.ko echo "---" echo "dmesg output:" dmesg | grep "poc:" | tail -6 |