⬢ DragonFlyBSD Kernel Audit
DF-2495 / fix_run.log
← back to finding ↓ download raw
== DF-2495 fix validation: single-fix kernel (DragonFly 6.5-DEVELOPMENT #1:
   Mon Oct 12 11:14:44 UTC 2026, fix.diff applied to /usr/src, nativekernel
   + installkernel + reboot), rig + df2495_status rebuilt on the fixed tree ==

$ sysctl kern.dfrig_ata_test=3     # disk_count=255 -> status OOB write
== DF-2495 test3: disk_count=255 -> production ata_raid_status() OOB write ==
parse rc=0: raidp[0]=0 rdp->total_disks=0         <-- FIX: parse rejects disk_count=255
parse failed, cannot run status                   <-- FIX: no inflated array created,
                                                      no ata_raid_status() call, no write
                                                  (baseline: rc=1, total_disks=255,
                                                   1912 bytes past the 152-byte buffer,
                                                   12/24 guard chunks smashed)

$ sysctl kern.dfrig_ata_test=7     # install into REAL kernel ata_raid_arrays[0]
== DF-2495 test7 ... rdp->total_disks=0 ...      <-- FIX: nothing installed (was 255)

$ /root/dfrig/df2495_status 0     # REAL /dev/ata IOCATARAIDSTATUS
ioctl returned -1 (errno=6) total_disks=0         <-- FIX: ENXIO, no array, no write
                                                  (baseline: ioctl returned 0,
                                                   total_disks=255 delivered,
                                                   1912 OOB bytes written)