DragonFlyBSD Kernel Audit
DF-2558 / run.2.log
← back to finding ↓ download raw
[*] planted 8 bound AF_UNIX SOCK_DGRAM sockets (sun_len~17, sizeof(xunpcb)=912)
[*] oid net.local.dgram.pcblist -> miblen=4
[*] off_au=224 len_au=256  off_cau=480 len_cau=256  off_ah=904 len_ah=8

=== iter 0: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=154
    xu_addr tail                 (242 B): 000098b7 361801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 
                                        000098b7 361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff2000 00000000 00004c75 264800f8 
                                        ffff805c 7281ffff ffff0075 264800f8 ffff48b6 361801f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=44 -> leak[524..736) non-zero=129
    xu_caddr leak                (212 B): 00f8ffff 20000000 00000000 1a0c0000 00000000 01000000 19000000 70b63618 
                                        01f8ffff 1a000000 49010000 00752648 00f8ffff a0c3258d 00f8ffff a0000000 
                                        00000000 03000000 00000000 00752648 00f8ffff a8b63618 01f8ffff 00000000 
                                        00000000 00000000 00000000 c08d6b81 ffffffff 80c2258d 00f8ffff 00004a00 
                                        08000000 88b63618 01f8ffff 357a9a80 ffffffff f8b73618 01f8ffff f8b73618 
                                        01f8ffff a8b63618 01f8ffff facc9980 ffffffff 00000000 00000000 00000000 
                                        00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 291 / 462 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv6���"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=152
    xu_addr tail                 (238 B): 361801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 000098b7 
                                        361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff2000 00000000 00004c75 264800f8 ffff805c 
                                        7281ffff ffff0075 264800f8 ffff48b6 361801f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=44 -> leak[524..736) non-zero=129
    xu_caddr leak                (212 B): 00f8ffff 20000000 00000000 1a0c0000 00000000 01000000 19000000 70b63618 
                                        01f8ffff 1a000000 49010000 00752648 00f8ffff a0c3258d 00f8ffff a0000000 
                                        00000000 03000000 00000000 00752648 00f8ffff a8b63618 01f8ffff 00000000 
                                        00000000 00000000 00000000 c08d6b81 ffffffff 80c2258d 00f8ffff 00004a00 
                                        08000000 88b63618 01f8ffff 357a9a80 ffffffff f8b73618 01f8ffff f8b73618 
                                        01f8ffff a8b63618 01f8ffff facc9980 ffffffff 00000000 00000000 00000000 
                                        00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 289 / 458 possible
  rec 2 leaked = 306 / 484 possible (al=18 cl=18)
  rec 3 leaked = 306 / 484 possible (al=18 cl=18)
  rec 4 leaked = 306 / 484 possible (al=18 cl=18)
  rec 5 leaked = 305 / 483 possible (al=19 cl=18)
  rec 6 leaked = 305 / 483 possible (al=19 cl=18)
  rec 7 leaked = 305 / 483 possible (al=19 cl=18)
  rec 8 leaked = 305 / 483 possible (al=19 cl=18)
  rec 9 leaked = 305 / 483 possible (al=19 cl=18)
  rec 10 leaked = 305 / 483 possible (al=19 cl=18)
  rec 11 leaked = 305 / 483 possible (al=19 cl=18)
  rec 12 leaked = 305 / 483 possible (al=19 cl=18)
  --- iter 0 subtotal: 3938 leaked non-zero bytes / 6236 possible ---

=== iter 1: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log946_7���"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=157
    xu_addr tail                 (242 B): 3934365f 371801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 
                                        000098b7 361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff0100 00000000 0000ccbd 304800f8 
                                        ffff805c 7281ffff ffff80bd 304800f8 ffff48b6 361801f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=44 -> leak[524..736) non-zero=134
    xu_caddr leak                (212 B): ffffffff 01000000 00000000 8e0c0000 00000000 00208c81 ffffffff 00000000 
                                        01f8ffff 8e000000 49010000 80bd3048 00f8ffff a0c3258d 00f8ffff 74000000 
                                        00000000 03000000 00000000 80bd3048 00f8ffff a8b63618 01f8ffff 00000000 
                                        00000000 00000000 00000000 388d6b81 ffffffff 80c2258d 00f8ffff 00404700 
                                        08000000 88b63618 01f8ffff 357a9a80 ffffffff f8b73618 01f8ffff f8b73618 
                                        01f8ffff a8b63618 01f8ffff facc9980 ffffffff 00000000 00000000 00000000 
                                        00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 299 / 462 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv7���"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=153
    xu_addr tail                 (238 B): 371801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 000098b7 
                                        361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff0100 00000000 0000ccbd 304800f8 ffff805c 
                                        7281ffff ffff80bd 304800f8 ffff48b6 361801f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=44 -> leak[524..736) non-zero=134
    xu_caddr leak                (212 B): ffffffff 01000000 00000000 8e0c0000 00000000 00208c81 ffffffff 00000000 
                                        01f8ffff 8e000000 49010000 80bd3048 00f8ffff a0c3258d 00f8ffff 74000000 
                                        00000000 03000000 00000000 80bd3048 00f8ffff a8b63618 01f8ffff 00000000 
                                        00000000 00000000 00000000 388d6b81 ffffffff 80c2258d 00f8ffff 00404700 
                                        08000000 88b63618 01f8ffff 357a9a80 ffffffff f8b73618 01f8ffff f8b73618 
                                        01f8ffff a8b63618 01f8ffff facc9980 ffffffff 00000000 00000000 00000000 
                                        00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 295 / 458 possible
  rec 2 leaked = 316 / 484 possible (al=18 cl=18)
  rec 3 leaked = 316 / 484 possible (al=18 cl=18)
  rec 4 leaked = 316 / 484 possible (al=18 cl=18)
  rec 5 leaked = 315 / 483 possible (al=19 cl=18)
  rec 6 leaked = 315 / 483 possible (al=19 cl=18)
  rec 7 leaked = 315 / 483 possible (al=19 cl=18)
  rec 8 leaked = 315 / 483 possible (al=19 cl=18)
  rec 9 leaked = 315 / 483 possible (al=19 cl=18)
  rec 10 leaked = 315 / 483 possible (al=19 cl=18)
  rec 11 leaked = 315 / 483 possible (al=19 cl=18)
  rec 12 leaked = 315 / 483 possible (al=19 cl=18)
  --- iter 1 subtotal: 4062 leaked non-zero bytes / 6236 possible ---

=== iter 2: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log946_7���"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=156
    xu_addr tail                 (242 B): 3934365f 371801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 
                                        000098b7 361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff0200 00000000 00004cbb 344800f8 
                                        ffff805c 7281ffff ffff00bb 344800f8 ffff48b6 361801f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=108 -> leak[480..736) non-zero=167
    xu_caddr leak                (256 B): 6c807581 ffffffff 6c807281 ffffffff 69760100 00000000 cb339a80 8f0c0000 
                                        40807581 ffffffff c039ac8f 00f8ffff 02000000 00000000 8f0c0000 00000000 
                                        01000000 8e000000 70b63618 01f8ffff 8f000000 49010000 00bb3448 00f8ffff 
                                        a0c3258d 00f8ffff 75000000 00000000 03000000 00000000 00bb3448 00f8ffff 
                                        a8b63618 01f8ffff 00000000 00000000 00000000 00000000 388d6b81 ffffffff 
                                        80c2258d 00f8ffff 00504700 08000000 88b63618 01f8ffff 357a9a80 ffffffff 
                                        f8b73618 01f8ffff f8b73618 01f8ffff a8b63618 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 331 / 506 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv7���"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=152
    xu_addr tail                 (238 B): 371801f8 ffff0000 00000000 000098b5 361801f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 000080c2 258d00f8 ffff0000 00000000 00000000 00000000 000098b7 
                                        361801f8 ffff0000 00000000 000098b5 361801f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff78b5 361801f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff0200 00000000 00004cbb 344800f8 ffff805c 
                                        7281ffff ffff00bb 344800f8 ffff48b6 361801f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 000080c2 258d00f8 ffff28b7 361801f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=108 -> leak[480..736) non-zero=167
    xu_caddr leak                (256 B): 6c807581 ffffffff 6c807281 ffffffff 69760100 00000000 cb339a80 8f0c0000 
                                        40807581 ffffffff c039ac8f 00f8ffff 02000000 00000000 8f0c0000 00000000 
                                        01000000 8e000000 70b63618 01f8ffff 8f000000 49010000 00bb3448 00f8ffff 
                                        a0c3258d 00f8ffff 75000000 00000000 03000000 00000000 00bb3448 00f8ffff 
                                        a8b63618 01f8ffff 00000000 00000000 00000000 00000000 388d6b81 ffffffff 
                                        80c2258d 00f8ffff 00504700 08000000 88b63618 01f8ffff 357a9a80 ffffffff 
                                        f8b73618 01f8ffff f8b73618 01f8ffff a8b63618 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 08b93618 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 327 / 502 possible
  rec 2 leaked = 309 / 484 possible (al=18 cl=18)
  rec 3 leaked = 309 / 484 possible (al=18 cl=18)
  rec 4 leaked = 309 / 484 possible (al=18 cl=18)
  rec 5 leaked = 308 / 483 possible (al=19 cl=18)
  rec 6 leaked = 308 / 483 possible (al=19 cl=18)
  rec 7 leaked = 308 / 483 possible (al=19 cl=18)
  rec 8 leaked = 308 / 483 possible (al=19 cl=18)
  rec 9 leaked = 308 / 483 possible (al=19 cl=18)
  rec 10 leaked = 308 / 483 possible (al=19 cl=18)
  rec 11 leaked = 308 / 483 possible (al=19 cl=18)
  rec 12 leaked = 308 / 483 possible (al=19 cl=18)
  --- iter 2 subtotal: 4049 leaked non-zero bytes / 6324 possible ---

==== SUMMARY over 3 iters, 39 records: 12049 leaked non-zero bytes (of 18796 possible) ====
result: LEAK CONFIRMED (kernel-stack residue in xunpcb via pcblist sysctl)