DragonFlyBSD Kernel Audit
DF-1191 / run.log
← back to finding ↓ download raw
== DF-1191 ciss_cam_complete sense_length harness ==
SSD_FULL_SIZE (sizeof scsi_sense_data) = 32

sense_length= 32 : in-bounds (overflow into neighbor canary: 0 bytes, expected up to 0 past sense_data)
sense_length= 64 : OVERFLOW REPRODUCED (overflow into neighbor canary: 32 bytes, expected up to 32 past sense_data)
sense_length=255 : OVERFLOW REPRODUCED (overflow into neighbor canary: 32 bytes, expected up to 64 past sense_data)

Fixed kernel clamps to imin(sense_length, SSD_FULL_SIZE) -> 0 overflow.
RUN_EXIT=0