#!/bin/sh
# DF-2541 run: must run as ROOT (MRT_INIT + raw socket are privileged).
# This is a root-configured multicast routing race; an unprivileged user
# cannot trigger it (MRT_INIT requires root). The realistic threat model is
# an admin running mrouted while an attacker floods during reconfiguration.
set -e
cd "$(dirname "$0")"
echo "+ kldload ip_mroute (ensure module present)"
kldload -n ip_mroute 2>/dev/null || true
echo "+ ./poc (root)"
timeout 60 ./poc
echo "RUN_EXIT=$?"