DragonFlyBSD Kernel Audit
DF-0724 / run.sh
← back to finding ↓ download raw
# run.sh - DF-0724 PoC run
#!/bin/sh
cd "$(dirname "$0")"
echo "=== DF-0724 trigger PoC ==="
echo "=== Unsynchronized timer-vs-caller double-close race in rfcomm_dlc_close ==="
echo ""
echo "NOTE: This PoC attempts to create an RFCOMM socket and connect to a"
echo "remote Bluetooth peer. On a guest WITHOUT a Bluetooth adapter (no HCI"
echo "unit), connect() fails with EHOSTUNREACH and the race path in"
echo "rfcomm_dlc_close is never reached. The bug is confirmed at the code"
echo "level (see VERDICT.md) but not triggerable without BT hardware."
echo ""
echo "Precondition: netbt.ko must be loaded (requires root: kldload netbt)"
echo ""
./rfcomm_race_test
echo "RUN_EXIT=$?"