DragonFlyBSD Kernel Audit
DF-0558 / run.sh
← back to finding ↓ download raw
# DF-0558 — hci_event_num_compl_pkts unbounded loop (remote unauth Bluetooth DoS)
# run.sh: this bug is NOT runtime-triggerable on the audit guest (no Bluetooth HW).
# See VERDICT.md for the source trace + the realistic trigger.
echo "DF-0558: hci_event_num_compl_pkts unbounded loop."
echo "Runtime trigger requires a Bluetooth controller delivering an HCI"
echo "Number_Of_Completed_Packets event whose num_con_handles exceeds the"
echo "actual follow-on handle/count pairs.  This QEMU guest has no BT radio"
echo "(netbt.ko not loaded, no hci_unit) so the path is unreachable here."
echo "Bug is CONFIRMED at source (see VERDICT.md); fix compiled in netbt.ko."
exit 0