DragonFlyBSD Kernel Audit
DF-0825 / fix_run.log
← back to finding ↓ download raw
=== PATCHED KERNEL #1: running harness ===
DragonFly 6.5-DEVELOPMENT #1: Sat Jul 11 01:40:12 UTC 2026
---
KLDLOAD_RC=0
--- dmesg ---
DF-0825: harness start
DF-0825: calling nfs_getnickauth(nmp, cred uid=1001, ...)
DF-0825: nickname planted = 0xdeadbeef
DF-0825: RPCAKN_NICKNAME = 1, txdr = 0x01000000
DF-0825: nfs_getnickauth returned error=0
DF-0825: auth_str = 0xfffff8008d382270, auth_len = 8
DF-0825: auth_str[0..3]  = 0x00000001
DF-0825: auth_str[4..7]  = 0xdeadbeef  (<= OOB heap if bug present)
DF-0825: expected[0..3]  = 0x00000001 (RPCAKN_NICKNAME)
DF-0825: expected[4..7]  = 0xdeadbeef (nickname)
DF-0825: raw bytes at auth_str: 00000001 deadbeef 00000000 00000000
DF-0825: OK M-bM^@M^T auth_str points at allocation base (bug fixed)
DF-0825: now calling kfree(auth_str) to demonstrate slab corruption...
DF-0825: kfree returned (no panic => INVARIANTS may be off or slab was lucky)
DF-0825: harness done
--- waiting 15s for slab GC to check for deferred panic ---
still alive after 15s
done