DragonFlyBSD Kernel Audit
DF-2452 / fix_run.log
← back to finding ↓ download raw
--- PATCHED MODULE (dm_target_flakey.ko with fix.diff applied) ---
[*] DF-2452 dm_target_flakey NULL-deref via mismatched feature_cnt
[*] params: "/dev/md0 0 10 5 5 drop_writes" -- feature_cnt=5 but only 1 arg follows
[*] _init_features loop reads past populated argv slots into NULL
[*] expect: kernel panic -- NULL deref in strcmp
[*] firing reload with mismatched feature_cnt...
[!] reload ioctl returned rv=22 (Invalid argument) -- kernel survived?
POC_EXIT=0

--- kldstat after patched run (guest still up) ---
 4    2 0xffffffff82600000    a2000 dm.ko
 5    1 0xffffffff826a2000     1000 dm_target_flakey.ko