DragonFlyBSD Kernel Audit
DF-0594 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-0594 — run the code-level harness. Two outcomes:
#   1. INVARIANTS build aborts via the KASSERT panic (the deterministic DoS on
#      the default X86_64_GENERIC kernel).
#   2. NO_INVARIANTS build SIGSEGVs at the wep_decrypt ICV *pos++ check,
#      proving the OOB read (CWE-125/787) on production kernels.
cd "$(dirname "$0")"
echo "=================== INVARIANTS build (default kernel) ==================="
./tkip_harness
INV_RC=$?
echo "INVARIANTS exit code: $INV_RC"
echo
echo "=============== NO_INVARIANTS build (production kernel) ================="
./tkip_harness_noinv
NOINV_RC=$?
echo "NO_INVARIANTS exit code: $NOINV_RC"
echo
echo "RUN_DONE inv_rc=$INV_RC noinv_rc=$NOINV_RC"