DragonFlyBSD Kernel Audit
DF-2449 / fix_run.2.log
← back to finding ↓ download raw
[*] DF-2449 dm_table_load_ioctl uninitialized start/length
[*] kmalloc(sizeof(dm_table_entry_t), M_DM, M_WAITOK) -- NO M_ZERO
[*] prop_dictionary_get_uint64 return value NOT checked
[*] running 5 reload cycles, omitting start/length each time...
[trial 0] df2449_0: reload rv=22 (Invalid argument) -- entry rejected
[trial 1] df2449_1: reload rv=22 (Invalid argument) -- entry rejected
[trial 2] df2449_2: reload rv=22 (Invalid argument) -- entry rejected
[trial 3] df2449_3: reload rv=22 (Invalid argument) -- entry rejected
[trial 4] df2449_4: reload rv=22 (Invalid argument) -- entry rejected

[*] ALL 5 reloads returned EINVAL -- kernel
    rejects table entries that omit start/length.
    FIX IS IN EFFECT: no uninitialized-heap leak.