⬢ DragonFlyBSD Kernel Audit
DF-2459 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
{
  "finding_id": "DF-2459",
  "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026    root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64",
  "code_hash": "bab544176ac6d400de9c4f4c1841d6c6b67847fc520b6b6fd7c88aef28918713",
  "tested_at": "2026-08-09T08:28:38Z",
  "verdict": "REPRODUCED",
  "impact": "panic",
  "confidence": "certain",
  "reproduce": {
    "build": "./build.sh",
    "run": "./run.sh",
    "expected": "UNPATCHED: panic 'Fatal trap 12 va=0x0 Stopped at memmove+0xb5'; PATCHED: idrv 'still alive after 6s'"
  },
  "kernel_refs": [
    "sys/dev/disk/iscsi/initiator/isc_sm.c:228",
    "sys/dev/disk/iscsi/initiator/isc_sm.c:212",
    "sys/dev/disk/iscsi/initiator/isc_soc.c:120",
    "sys/dev/disk/iscsi/initiator/isc_soc.c:125"
  ],
  "artifacts": [
    {
      "path": "mtarget.c",
      "type": "trigger-source",
      "desc": "malicious target: NOP-IN itt=ffffffff ttt=1 AHSLength=1"
    },
    {
      "path": "idrv.c",
      "type": "trigger-source",
      "desc": "minimal initiator driver (ISCSISETSOC pre-login)"
    },
    {
      "path": "build.sh",
      "type": "build-script",
      "desc": "cc -o mtarget mtarget.c; cc -o idrv idrv.c"
    },
    {
      "path": "run.sh",
      "type": "run-script",
      "desc": "launch mtarget nopin + idrv"
    },
    {
      "path": "panic.txt",
      "type": "panic-signature",
      "desc": "Fatal trap 12 va=0x0 memmove+0xb5"
    },
    {
      "path": "env.txt",
      "type": "environment",
      "desc": "uname, kern.version, cc, module sha256"
    },
    {
      "path": "fix.diff",
      "type": "suggested-fix",
      "desc": "in _nop_in re-queue: clear stale ahs/ds lens, force i_prepPDU"
    },
    {
      "path": "VERDICT.md",
      "type": "verdict",
      "desc": "full analysis"
    },
    {
      "path": "manifest.json",
      "type": "manifest",
      "desc": "this catalog"
    }
  ]
}