DragonFlyBSD Kernel Audit
DF-1880 / harness_run.log
← back to finding ↓ download raw
=== RUN DF-1880 2026-07-20T18:44:52Z ===
DF-1880: oce_hw_update_multicast (oce_hw.c:547-585)
  joined 64 multicast groups (loop bound OCE_MAX_MC_FILTER_SIZE=64, mac[] array size=32 slots)
  OOB writes = 32 MAC slots x 6 bytes = 192 bytes past mac[32] into the DMA alloc
  Harness: simulated bcopy touched 192 sentinel bytes past mac[32]
  Fix: loop bound should be nitems(req->params.req.mac)=32, not OCE_MAX_MC_FILTER_SIZE=64.
[exit=0]