DragonFlyBSD Kernel Audit
DF-0593 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-0593 run.sh
#
# No runtime trigger exists for this bug on the current kernel. The
# verification consisted of (1) a source-level reachability trace that
# proved fairq_class_destroy() is only reachable via per-class destroy,
# which all three pf ioctl callers gate off; and (2) a build+boot
# validation of the fix.diff on a single-fix kernel (see fix_build.log /
# fix_run.log). This script documents that no runtime PoC exists.
echo "DF-0593: latent UAF, no runtime trigger. See VERDICT.md for the analysis."
exit 0