DragonFlyBSD Kernel Audit
DF-1282 / run.log
← back to finding ↓ download raw
[DF-1282] mapping_table allocated for max_devices=264 entries (sizeof(entry)=32)
[DF-1282] attacker/firmware DeviceIndex=266, num_slots=4
[DF-1282] BUG CONFIRMED: dev_idx=266 >= max_devices=264 -> write at mapping_table[266] is 64 bytes PAST the allocation (into the adjacent slab object)
[DF-1282] guard/slab region corrupted: YES -> next heap object(s) overwritten (4 of 64 entries touched)
[DF-1282] FIX: with bounds check, write SKIPPED (dev_idx=266 >= max_devices=264) -> no corruption
RUN_EXIT=0