DF-0607 / run.sh
#!/bin/sh # DF-0607 run script # Requires root (BPF write access) and an ng_iface interface. # NOTE: Cannot reproduce on this guest — see VERDICT.md for details. # The cited code (netgraph7) is dead code; the loaded module (netgraph) is fixed. # Additionally, a separate constructor bug prevents creating ng_iface nodes. echo "DF-0607: This PoC cannot reproduce on this guest." echo "Reason: The cited code (sys/netgraph7/iface/ng_iface.c) is dead code." echo "The loaded module (sys/netgraph/iface/ng_iface.c) already has the fix." echo "" echo "For reference, the intended reproduction would be:" echo " kldload ng_iface" echo " ngctl mkpeer . iface dummy inet # creates ng0" echo " ./df-bpf-panic ng0 # tight write loop to /dev/bpf" echo "" echo "Expected (if the bug were present): KASSERT panic in ng_iface_bpftap" echo "Actual: ng_iface cannot be created (separate constructor bug)," echo " and the loaded code already reads AF from mbuf (no bug)." exit 0 |