DF-2478 / manifest.json
{ "finding_id": "DF-2478", "verdict": "reproduced", "impact": "denial_of_service", "reproduce": { "build": "sh build.sh (guest, root, /usr/src required)", "run": "kldload md (built-in); ./md_grow 3; ls /dev/md*; su -m operator_user -c dd if=/dev/md0 ...", "expected": "run.log: /dev/md1 auto-created by opening /dev/md0; operator-group dd: Operation not permitted (EPERM) x3; root dd: 1+0 records in/out." }, "kernel_refs": [ "sys/dev/disk/md/md.c:135", "sys/dev/disk/md/md.c:136", "sys/dev/disk/md/md.c:410", "sys/kern/subr_disk.c:1070" ], "artifacts": [ "README.md", "VERDICT.md", "build.sh", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json" ] } |