DF-1076 / build.sh
#!/bin/sh # DF-1076 build script. # The bug path (ichsmb block-read ISR) is hardware-gated on this guest # (no ichsmb PCI device, no /dev/smb0), so we build a userspace harness # that reproduces the exact algorithmic logic of the vulnerable ISR. set -e cd "$(dirname "$0")" cc -O0 -Wall -o harness harness.c cc -O0 -Wall -DCLAMP_FIX -o harness_clamped harness.c echo "built: harness (models unpatched kernel) and harness_clamped (models patched kernel)" |