DragonFlyBSD Kernel Audit
DF-0880 / build.log
← back to finding ↓ download raw
wrote findings/poc/DF-0880/df0880.udf: 1048576 bytes (512 sectors)
root FE: l_ea=0 l_ad=0xFFFF -> size=UDF_FENTRY_SIZE+l_ea+l_ad=176+0+65535=65711
bsize=2048 -> bcopy reads 65711 bytes from 2048-byte buffer = 63663-byte HEAP OVER-READ