#!/bin/sh
# DF-0823 run script — triggers the UAF on an unpatched kernel.
#
# Prerequisites:
#   - Guest is up (ssh dfbsd = root)
#   - /tmp has ~600 MB free (two 256 MB images)
#   - Running as root in the guest
#
# Expected on BUGGY (unpatched) kernel:
#   Kernel panic (fatal trap 12 page fault in hammer2_primary_xops_thread)
#   within ~10 seconds of the final umount. SSH connection lost.
#
# Expected on FIXED kernel:
#   Clean exit 0, "Guest survived 15s post-umount — no panic".

# Copy trigger to guest and run it
scp -F dfbsd-qemu/config trigger.sh dfbsd:/root/trigger.sh
ssh -F dfbsd-qemu/config dfbsd '/bin/sh /root/trigger.sh'