DF-0593 / run.sh
#!/bin/sh # DF-0593 run.sh # # No runtime trigger exists for this bug on the current kernel. The # verification consisted of (1) a source-level reachability trace that # proved fairq_class_destroy() is only reachable via per-class destroy, # which all three pf ioctl callers gate off; and (2) a build+boot # validation of the fix.diff on a single-fix kernel (see fix_build.log / # fix_run.log). This script documents that no runtime PoC exists. echo "DF-0593: latent UAF, no runtime trigger. See VERDICT.md for the analysis." exit 0 |