DF-1060 / run.sh
#!/bin/sh echo "DF-1060: FW_GTPMAP bcopy with attacker-inflatable crc_len." echo "Cannot trigger on this guest: no FireWire PCI controller, /dev/fw* absent." echo "Bug confirmed by source review at sys/bus/firewire/fwdev.c:657-660." echo "Expected: kernel heap leak up to 256 KB if crc_len is inflated by malicious FW device." exit 0 |