⬢ DragonFlyBSD Kernel Audit
DF-2454 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-2454",
 "verdict": "reproduced",
 "impact": "none",
 "reproduce": {
  "build": "see build.sh (dfmisc.ko verbatim striped target)",
  "run": "sysctl \"kern.dfmiscgo=stripe 32\"",
  "expected": "ksnprintf length-tracking overrun confirmed mechanically: production dm_target_stripe_table with 32 stripes, a 16-char pdev name and 20-digit offsets returned a params buffer whose bytes [1024..1104] "
 },
 "kernel_refs": [
  "sys/dev/disk/dm/striped/dm_target_striped.c:170",
  "sys/dev/disk/dm/striped/dm_target_striped.c:223"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "dfmisc.c",
  "dm_target_striped_verbatim.h",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "run.log",
  "run.sh",
  "verdict.json"
 ]
}