DF-1606 / build.sh
#!/bin/sh # Build script for DF-1606 acpi_hp cmi_order[128] heap-overflow PoC. # The kernel path is not reachable on this QEMU guest (no HP ACPI/WMI hardware), # so this harness reproduces the EXACT loop logic of acpi_hp_hpcmi_read() # lines 1171-1204 with a heap-allocated fake softc whose layout matches the # kernel's kmalloc'd struct acpi_hp_softc. set -e cd "$(dirname "$0")" cc -O2 -o df1606_poc df1606_poc.c echo "Built df1606_poc" |