⬢ DragonFlyBSD Kernel Audit
DF-0616 / build.sh
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
#!/bin/sh
# DF-0616 — build the code-level proof harness.
# Builds two binaries:
#   df0616_harness        — vulnerable logic (netmap_generic.c:672-674, unbounded)
#   df0616_harness_fixed  — same logic with the proposed fix (clamp to NETMAP_BUF_SIZE,
#                           mirroring the TX-side check at netmap_generic.c:500)
set -e
cd "$(dirname "$0")"
cc -O2 -Wall -o df0616_harness        df0616_harness.c
cc -O2 -Wall -DFIX -o df0616_harness_fixed df0616_harness.c
echo "built: df0616_harness (vulnerable) and df0616_harness_fixed (patched logic)"