# DF-0921 leak sample: /proc/409/map (syslogd, uid 0) read by maxx (uid 1001)
# Captured on unpatched baseline (DragonFly 6.5-DEVELOPMENT #0):
#
=== RUN 1: /proc/409/map (syslogd) ===
0x0000000000400000 0x0000000000409000 -1 -1 0xfffff80116822c00 r-x 1 0 0x0000 COW NC vnode /usr/sbin/syslogd
0x0000000000609000 0x000000000060a000 -1 -1 0xfffff8011683bd40 rw- 1 0 0x0180 COW NC default -
0x000000000060a000 0x000000000060d000 -1 -1 0xfffff80116839180 rw- 1 0 0x0180 COW NNC default -
0x0000000800609000 0x000000080064a000 -1 -1 0xfffff80116821940 r-x 30 0 0x0000 COW NC vnode /libexec/ld-elf.so.2
0x000000080064a000 0x000000080066d000 -1 -1 0xfffff80116825cc0 rw- 1 0 0x0180 COW NNC default -
0x000000080066d000 0x000000080067d000 -1 -1 0 rw- 0 0 0x0000 NCOW NNC uksmap -
0x0000000800680000 0x00000008006a0000 -1 -1 0xfffff80116839e00 rw- 1 0 0x0180 COW NNC default -
0x00000008006a0000 0x00000008006b1000 -1 -1 0xfffff80116836980 rw- 1 0 0x2180 NCOW NNC default -
0x00000008006c0000 0x0000000800710000 -1 -1 0xfffff8011683bfc0 rw- 1 0 0x2180 NCOW NNC default -
0x0000000800710000 0x0000000800720000 -1 -1 0 r-- 0 0 0x0000 NCOW NNC uksmap -
0x0000000800720000 0x0000000800780000 -1 -1 0xfffff801168397c0 rw- 1 0 0x2180 NCOW NNC default -
0x000000080084a000 0x000000080084e000 -1 -1 0xfffff80116826d00 rw- 1 0 0x0180 COW NC default -
0x000000080084e000 0x0000000800860000 -1 -1 0xfffff801168379c0 rw- 1 0 0x0180 COW NNC default -
0x0000000800860000 0x0000000800871000 -1 -1 0xfffff80116824140 r-x 24 0 0x0000 COW NC vnode /lib/libutil.so.4
0x0000000800871000 0x0000000800a70000 -1 -1 0xfffff80116825180 --- 1 0 0x0000 COW NC default -
0x0000000800a70000 0x0000000800a71000 -1 -1 0xfffff8011683f800 rw- 1 0 0x0180 COW NNC default -
0x0000000800a71000 0x0000000800a73000 -1 -1 0 rw- 0 0 0x0000 NCOW NNC none -
0x0000000800a73000 0x0000000800ba8000 -1 -1 0xfffff80116822200 r-x 30 0 0x0000 COW NC vnode /lib/libc.so.8
0x0000000800ba8000 0x0000000800da7000 -1 -1 0xfffff8011683c9c0 --- 1 0 0x0000 COW NC default -
0x0000000800da7000 0x0000000800db4000 -1 -1 0xfffff801168220c0 rw- 1 0 0x0180 COW NNC default -
0x0000000800db4000 0x0000000800dd1000 -1 -1 0xfffff8011683f300 rw- 1 0 0x0180 COW NNC default -
0x00007fffffde0000 0x00007fffffdfe000 -1 -1 0xfffff8011683a800 rw- 3 0 0x0180 COW NNC default -
0x00007fffffdfe000 0x00007fffffdff000 -1 -1 0xfffff8011683a800 r-x 3 0 0x0180 COW NC default -
0x00007fffffdff000 0x00007fffffe00000 -1 -1 0xfffff8011683a800 rw- 3 0 0x0180 COW NC default -
[*] running as uid=1001 gid=1001

=== RUN 2: /proc/409/map (syslogd) ===

# Deterministic across runs (same addresses; ASLR is OFF on this guest so
# the leak is byte-identical, but on a system with randomize_mmap=1 the same
# read would still expose the runtime addresses).