⬢ DragonFlyBSD Kernel Audit
DF-0912 / leak_sample.txt
← back to finding ↓ download raw 
=== OOB run1 ===
[iter 0] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a25c0  (18446735278942594496)
  f_bfree  = 0x0000000000000000  (0)
  f_bavail = 0xfffff8004f0a25d0  (18446735278942594512)
  f_files  = 0x0000000000000000  (0)
  f_ffree  = 0xfffff8004f0a2610  (18446735278942594576)
  f_bsize  = 1326065008  f_iosize = 4096
[iter 1] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a25d0  (18446735278942594512)
  f_bfree  = 0x0000000000000000  (0)
  f_bavail = 0xfffff8004f0a2610  (18446735278942594576)
  f_files  = 0x0000000000000000  (0)
  f_ffree  = 0xfffff8004f0a2570  (18446735278942594416)
  f_bsize  = 1326065120  f_iosize = 4096
[iter 2] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2610  (18446735278942594576)
  f_bfree  = 0x0000000000000000  (0)
  f_bavail = 0xfffff8004f0a2570  (18446735278942594416)
  f_files  = 0x0000000000000000  (0)
  f_ffree  = 0xfffff8004f0a25e0  (18446735278942594528)
  f_bsize  = 1326065136  f_iosize = 4096

=== OOB run2 ===
[iter 0] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a25d0  (18446735278942594512)
  f_bfree  = 0x0000000000000001  (1)
  f_bavail = 0x68732e646c697562  (7526410411116688738)
  f_files  = 0x0068732f6e696200  (29400045130965504)
  f_ffree  = 0xfffff8004f0a2540  (18446735278942594368)
  f_bsize  = 1935829356  f_iosize = 4096
[iter 1] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2610  (18446735278942594576)
  f_bfree  = 0x0000000000000002  (2)
  f_bavail = 0xfffff8004f0a25d0  (18446735278942594512)
  f_files  = 0x0000000000000001  (1)
  f_ffree  = 0x68732e646c697562  (7526410411116688738)
  f_bsize  = 1326064960  f_iosize = 4096
[iter 2] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2600  (18446735278942594560)
  f_bfree  = 0x0000000000000003  (3)
  f_bavail = 0xfffff8004f0a2610  (18446735278942594576)
  f_files  = 0x0000000000000002  (2)
  f_ffree  = 0xfffff8004f0a25d0  (18446735278942594512)
  f_bsize  = 1818850658  f_iosize = 4096

=== OOB run3 ===
[iter 0] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2570  (18446735278942594416)
  f_bfree  = 0x0000000000000001  (1)
  f_bavail = 0xfffff8004f0a25e0  (18446735278942594528)
  f_files  = 0x0000000000000005  (5)
  f_ffree  = 0xfffff8004f3301e0  (18446735278945272288)
  f_bsize  = 0  f_iosize = 4096
[iter 1] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0x2b6364747362696c  (3126453017640069484)
  f_bfree  = 0x0000392e6f732e2b  (62871601098283)
  f_bavail = 0x66645f6465737566  (7378126974343148902)
  f_files  = 0x0000390032313930  (62673004869936)
  f_ffree  = 0x706172772d6f746c  (8097879461177816172)
  f_bsize  = 1347904355  f_iosize = 4096
[iter 2] statfs (OOB: audit bypassed via claimed len) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2560  (18446735278942594400)
  f_bfree  = 0x0000000000000002  (2)
  f_bavail = 0xfffff8004f0a2570  (18446735278942594416)
  f_files  = 0x0000000000000001  (1)
  f_ffree  = 0xfffff8004f0a25e0  (18446735278942594528)
  f_bsize  = 1328742880  f_iosize = 4096

=== UNDERFLOW run ===
/bin/sh: ./fused_df0912: not found
=== UNDERFLOW LEAK ===
[iter 0] statfs (underflow: audit rejected write but consumer still read OOB) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a2610  (18446735278942594576)
  f_bfree  = 0x0000000000000001  (1)
  f_bavail = 0xfffff8004f3301e0  (18446735278945272288)
  f_files  = 0xffffffff82606ca0  (18446744071601941664)
  f_ffree  = 0xfffff8004f0a2570  (18446735278942594416)
  f_bsize  = 1326065120  f_iosize = 4096
[iter 1] statfs (underflow: audit rejected write but consumer still read OOB) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a25c0  (18446735278942594496)
  f_bfree  = 0x0000000000000002  (2)
  f_bavail = 0xfffff8004f0a2610  (18446735278942594576)
  f_files  = 0x0000000000000001  (1)
  f_ffree  = 0xfffff8004f3301e0  (18446735278945272288)
  f_bsize  = 1326065008  f_iosize = 4096
[iter 2] statfs (underflow: audit rejected write but consumer still read OOB) fields (non-zero == OOB heap read):
  f_blocks = 0xfffff8004f0a25b0  (18446735278942594480)
  f_bfree  = 0x0000000000000003  (3)
  f_bavail = 0xfffff8004f0a25c0  (18446735278942594496)
  f_files  = 0x0000000000000002  (2)
  f_ffree  = 0xfffff8004f0a2610  (18446735278942594576)
  f_bsize  = 1328742880  f_iosize = 4096