DragonFlyBSD Kernel Audit
DF-1606 / run.log
← back to finding ↓ download raw
## DF-1606 trigger-PoC build
BUILD_EXIT=0

## DF-1606 trigger-PoC run
maxInstance           = 140
cmi_order array bound = 128 entries (1024 bytes)
cmi_order_size after  = 140 entries (overflow by 12 entries)
adjacent-slab canary corrupted bytes = 60 (first at +0)
[OK] heap OOB write past cmi_order[127] confirmed: 60 bytes
     kernel path: acpi_hp_hpcmi_read lines 1190-1202
     in-kernel effect: corruption of adjacent kmalloc-2048 slab
     slot -> INVARIANTS panic on default GENERIC; silent heap
     corruption on noinv.
RUN_EXIT=0