⬢ DragonFlyBSD Kernel Audit
DF-2237 / fix_run.log
← back to finding ↓ download raw
== patched libiconv.ko sha256 (loaded) ==
30bfdffe7430d3524e832faaa0cdc13622194b0e20022373658982a65f119642

== armed tables + km0 controls + km1 single-byte trigger + km2 double-byte trigger (patched kernel module) ==
SHA256 (/usr/obj/usr/src/sys/libiconv/libiconv.ko) = 30bfdffe7430d3524e832faaa0cdc13622194b0e20022373658982a65f119642
 2    1 0xffffffff81cd9000    7c288 ehci.ko
 3    1 0xffffffff81d56000    8c778 xhci.ko
 4    1 0xffffffff82600000     4000 libiconv.ko
registered UTF-16BE   <- DF2237CS   csid=3 datalen=4608
registered UTF-16BE   <- DF2237W2   csid=4 datalen=4608
registered _wctype    <- DF2237W2   csid=5 datalen=4608
all pairs registered
KM0_OK
KM1_OK
KM2_OK

df2237: mode 0
df2237: iconv_open OK handle=0xfffff8008d4a1400
df2237: control plain conv ret=0 consumed=2
df2237: control out [2 bytes]: 41 42
df2237: control conv_case(FROM_LOWER) 'C' ret=0 consumed=1
df2237: control out [1 bytes]: 63
df2237: mode 0 complete
df2237: mode 1
df2237: iconv_open OK handle=0xfffff8008d4a6e00
df2237: control plain conv ret=0 consumed=2
df2237: control out [2 bytes]: 41 42
df2237: control conv_case(FROM_LOWER) 'C' ret=0 consumed=1
df2237: control out [1 bytes]: 63
df2237: >>> TRIGGER conv_case(FROM_LOWER) "AB" -- expect NULL deref in iconv_xlat16_conv
df2237: <<< SURVIVED ret=-1 consumed=0 produced=0
df2237: trigger out [0 bytes]:
df2237: mode 1 complete
df2237: mode 2 -- double-byte _wctype FROM_LOWER trigger
df2237: iconv_open OK handle=0xfffff8008d4a8000
df2237: control plain conv ret=0 consumed=2
df2237: control out [2 bytes]: 12 34
df2237: >>> TRIGGER conv_case(FROM_LOWER) "\xab\xcd" -- expect NULL deref in iconv_xlat16_conv
df2237: <<< SURVIVED ret=-1 consumed=0 produced=0
df2237: trigger out [0 bytes]:
df2237: mode 2 complete