DragonFlyBSD Kernel Audit
DF-0791 / run.log
← back to finding ↓ download raw
=== BUGGY dive (kernel behaviour on default GENERIC #0) ===
[harness] mode=clean apply_fix=0 cap=128 rdsize=128 aoff=32 entry_reclen=96 dive_off=120 (vs rdsize=128)
mode=clean  apply_fix=0 -> rc=0  dive read OK, cn=0xaaaa007a007a007a (in bounds)
[harness] mode=oob apply_fix=0 cap=128 rdsize=128 aoff=32 entry_reclen=65535 dive_off=65559 (vs rdsize=128)
mode=oob    apply_fix=0 -> rc=2  SIGSEGV -> OOB READ past rdbuf (dive offset 65559 >= rdsize 128)
[harness] mode=tiny apply_fix=0 cap=128 rdsize=128 aoff=32 entry_reclen=2 dive_off=26 (vs rdsize=128)
mode=tiny   apply_fix=0 -> rc=0  dive read OK, cn=0xaaaaaaaaaaaaaaaa (in bounds)

=== FIXED dive (proposed fix rejects malformed entries) ===
[harness] mode=clean apply_fix=0 cap=128 rdsize=128 aoff=32 entry_reclen=96 dive_off=120 (vs rdsize=128)
mode=clean  apply_fix=0 -> rc=0  dive read OK, cn=0xaaaa007a007a007a (in bounds)
[harness] mode=oob apply_fix=1 cap=128 rdsize=128 aoff=32 entry_reclen=65535 dive_off=65559 (vs rdsize=128)
mode=oob    apply_fix=1 -> rc=-1 FIX REJECTED malformed entry (reclen=65535) -> EINVAL in kernel
[harness] mode=tiny apply_fix=1 cap=128 rdsize=128 aoff=32 entry_reclen=2 dive_off=26 (vs rdsize=128)
mode=tiny   apply_fix=1 -> rc=-1 FIX REJECTED malformed entry (reclen=2) -> EINVAL in kernel
RUN_EXIT=1