⬢ DragonFlyBSD Kernel Audit
DF-2404 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-2404",
 "verdict": "reproduced",
 "impact": "none",
 "reproduce": {
  "build": "see build.sh (dfmisc.ko with verbatim rdrand)",
  "run": "vmstat -m | grep temp; sysctl \"kern.dfmiscgo=rdrand 20000\"; vmstat -m | grep temp",
  "expected": "Quantified kernel-heap leak of the sc_rng_co callout array: 20000 production rdrand_attach/rdrand_detach cycles grew M_TEMP from Count=474/337K to Count=20000/3.08M (vmstat -m), exactly one ncpus-size"
 },
 "kernel_refs": [
  "sys/dev/crypto/rdrand/rdrand.c:126",
  "sys/dev/crypto/rdrand/rdrand.c:143"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "dfmisc.c",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "miscctl.c",
  "rdrand_verbatim.h",
  "run.log",
  "run.sh",
  "verdict.json"
 ]
}