⬢ DragonFlyBSD Kernel Audit
DF-2286 / run.log
← back to finding ↓ download raw
DF2286: targsim bus=2
DF2286: target mode enabled
DF2286: ATIO queued (kernel cbfcnp=&targdone, path=softc->path)
DF2286: read() returned user_ccb=0x7fffffdfd7a0 (expect 0x7fffffdfd7a0)
DF2286: LEAKED uccb.ccb_h.cbfcnp = 0xffffffff802c8ff0 (KERNEL pointer)
DF2286: LEAKED uccb.ccb_h.path   = 0xfffff8008d6c0fa0 (KERNEL heap pointer)
DF2286: user CCB func_code/status now = 0x332 / 0x1
DF2286: REPRODUCED -- kernel text pointer (targdone) and kernel heap pointer (cam_path) disclosed to the target daemon; KASLR defeated (compare nm targdone)
EXIT2286=0
ffffffff802c8ff0 t targdone