⬢ DragonFlyBSD Kernel Audit
DF-0823 / run.sh
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
#!/bin/sh
# DF-0823 run script — triggers the UAF on an unpatched kernel.
#
# Prerequisites:
#   - Guest is up (ssh dfbsd = root)
#   - /tmp has ~600 MB free (two 256 MB images)
#   - Running as root in the guest
#
# Expected on BUGGY (unpatched) kernel:
#   Kernel panic (fatal trap 12 page fault in hammer2_primary_xops_thread)
#   within ~10 seconds of the final umount. SSH connection lost.
#
# Expected on FIXED kernel:
#   Clean exit 0, "Guest survived 15s post-umount — no panic".

# Copy trigger to guest and run it
scp -F dfbsd-qemu/config trigger.sh dfbsd:/root/trigger.sh
ssh -F dfbsd-qemu/config dfbsd '/bin/sh /root/trigger.sh'