DragonFlyBSD Kernel Audit
DF-1912 / harness_run.log
← back to finding ↓ download raw
=== RUN DF-1912 2026-07-20T18:44:52Z ===
  iter 1: bio_offset=0 bp->b_bcount=16 (from buf#1) -> off+len=16 in-bounds
  iter 2: bio_offset=128 bp->b_bcount=16 (from buf#1) -> off+len=144 in-bounds
DF-1912: mdstrategy_preload (md.c:344-400)
  bp assigned ONCE at line 349, never refreshed inside the loop.
  From iter 2 on: bio->bio_offset is NEW but bp->b_data/b_bcount are STALE -> mismatched OOB / wrong-bytes / UAF after biodone frees buf.
  Detected 0 iterations where stale bp caused OOB on pl_ptr.
  Compare mdstrategy_malloc (md.c:239) which DOES refresh bp=bio->bio_buf.
[exit=0]