DF-0558 / run.sh
# DF-0558 — hci_event_num_compl_pkts unbounded loop (remote unauth Bluetooth DoS) # run.sh: this bug is NOT runtime-triggerable on the audit guest (no Bluetooth HW). # See VERDICT.md for the source trace + the realistic trigger. echo "DF-0558: hci_event_num_compl_pkts unbounded loop." echo "Runtime trigger requires a Bluetooth controller delivering an HCI" echo "Number_Of_Completed_Packets event whose num_con_handles exceeds the" echo "actual follow-on handle/count pairs. This QEMU guest has no BT radio" echo "(netbt.ko not loaded, no hci_unit) so the path is unreachable here." echo "Bug is CONFIRMED at source (see VERDICT.md); fix compiled in netbt.ko." exit 0 |