DragonFlyBSD Kernel Audit
DF-0616 / fix_run.log
← back to finding ↓ download raw
=== DF-0616 code-level harness: generic_netmap_rxsync OOB write ===
[*] NETMAP_BUF_SIZE   = 2048  (netmap_mem2.c:765)
[*] RX frame m_pkthdr.len = 9000  (jumbo/LRO frame)
[*] FIX ENABLED: len clamped to NETMAP_BUF_SIZE before m_copydata (mirrors netmap_generic.c:500)
[*] FIX: len 9000 > NETMAP_BUF_SIZE 2048 -> clamping to 2048
[*] m_copydata(m, 0, len=2048, addr) into 2048-byte netmap buffer

--- RESULT ---
[+] No OOB write: all 2048 bytes stayed within the 2048-byte buffer.
[+] ring->slot[j].len = 2048
[+] FIX HOLDS: overflow prevented (clamped).
EXIT=0