⬢ DragonFlyBSD Kernel Audit
DF-2251 / fix_run.log
← back to finding ↓ download raw
DF-2251 fix validation -- kernel #3 (DF-2250-fix + DF-2251 consumer re-point),
DragonFly 6.5-DEVELOPMENT #2: Sat Oct 17 15:43:57 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC

[guest] mount_nfs -o tcp 127.0.0.1:/ffs /mnt.nfs  -> NFS_OK_FIXED_KERNEL
[guest] echo hello > /mnt.nfs/postfix_file; cat /mnt.nfs/postfix_file -> hello  (NFS fully functional)

NFS RPC XIDs observed on lo0 (tcpdump, ONC-RPC/TCP call records):

BASELINE kernel (krandom-seeded then atomic_fetchadd ++, nfsm_subs.c:158-162):
  XIDs: ['0x402382e6', '0x402382e6', '0x402382e7', '0x402382e7', '0x402382e8', '0x402382e8', '0x402382e9', '0x402382e9', '0x402382ea', '0x402382ea']
  deltas: [0, 1, 0, 1, 0, 1, 0, 1, 0]   <-- perfectly linear +1 per request

FIXED kernel (xid = karc4random() per request):
  XIDs: ['0x9687eaee', '0x9687eaee', '0x2a14c83c', '0x2a14c83c']
  deltas: [0, -1819484850, 0]   <-- full-width random jumps, no +1 pattern

Conclusion: the consumer re-point removes the deterministic XID sequence
(one observed reply XID disclosed every subsequent XID on the baseline
kernel) while NFS remains functional (mount/read/write verified).