DragonFlyBSD Kernel Audit
DF-0871 / harness_compare.log
← back to finding ↓ download raw
=== FIXED harness (mirrors fix.diff logic) ===
[harness_fixed] DF-0871 fixed (bounded do/while, NUL-terminated) -- mirrors fix.diff
[harness_fixed] num=1  allocsz=72  copy completed with NO overflow.
[harness_fixed] entry[0].ad_namelen = 63 (capped)
[harness_fixed] bytes written past the 72-byte allocation = 0 (expect 0)
exit=0
[harness_fixed] DF-0871 fixed (bounded do/while, NUL-terminated) -- mirrors fix.diff
[harness_fixed] num=2  allocsz=144  copy completed with NO overflow.
[harness_fixed] entry[1].ad_namelen = 63 (capped)
[harness_fixed] bytes written past the 144-byte allocation = 0 (expect 0)
exit=0

=== BUGGY harness (still faults) ===
[harness]   72-byte ntvattrdef object.  On the live kernel this is a heap
[harness]   OOB write into the M_NTFSMNT slab zone (kmalloc-128/256 bucket).
exit=0