#!/bin/sh
# DF-0669 run helper — runs as root on the guest.
# Loads ipfw3 + ipfw3_basic (default-deny severs ssh, so output goes to
# /dev/console = dfbsd-qemu/boot.log), then triggers the PoC.
# The PoC needs SOCK_RAW which requires root.
set +e
cd "$(dirname "$0")"
KLDLOAD=/sbin/kldload
echo "[+] loading ipfw3 modules (networking will be severed)"
$KLDLOAD ipfw3
$KLDLOAD ipfw3_basic
echo "[+] running PoC (IP_FW_TABLE_DELETE on never-created table id=0)"
./df0669_ipfw3_null 74
echo "PoC_EXIT=$? (you should not see this — kernel should panic)"