DragonFlyBSD Kernel Audit
DF-0857 / run.2.log
← back to finding ↓ download raw
=== DF-0857 deterministic OOB proof ===
struct sizes: alblk=8 alleaf=12 alnode=8
data areas : fn_abd=0x60 (96) as_abd=0x1e0 (480)
legit max  : fnode-leaves=8 fnode-nodes=12 alsec-leaves=40 alsec-nodes=60

[BUG] fnode leaf   forged busycnt=255  total read=3060B  OOB past data=2964B (expected 2964)  poison-page hit = YES
[BUG] fnode node   forged busycnt=255  total read=2040B  OOB past data=1944B (expected 1944)  poison-page hit = YES
[BUG] alsec leaf   forged busycnt=255  total read=3060B  OOB past data=2580B (expected 2580)  poison-page hit = YES
[BUG] alsec node   forged busycnt=255  total read=2040B  OOB past data=1560B (expected 1560)  poison-page hit = YES

[FIX] fnode leaf   forged busycnt=255  result = REJECTED (EINVAL, no loop run)
[FIX] fnode node   forged busycnt=255  result = REJECTED (EINVAL, no loop run)
[FIX] alsec leaf   forged busycnt=255  result = REJECTED (EINVAL, no loop run)
[FIX] alsec node   forged busycnt=255  result = REJECTED (EINVAL, no loop run)

=== SUMMARY ===
DF_0857_BUG_PRESENT_TOTAL_LEAF_READ_BYTES=3060
DF_0857_BUG_PRESENT_TOTAL_NODE_READ_BYTES=2040
DF_0857_BUG_PRESENT_OOB_LEAF_PAST_DATA_FN=2964
DF_0857_BUG_PRESENT_OOB_NODE_PAST_DATA_FN=1944
DF_0857_BUG_CONFIRMED=1
DF_0857_FIX_REJECTS_FORGED_BUSYCNT=1