DragonFlyBSD Kernel Audit
DF-2558 / run.log
← back to finding ↓ download raw
[*] planted 8 bound AF_UNIX SOCK_DGRAM sockets (sun_len~17, sizeof(xunpcb)=912)
[*] oid net.local.dgram.pcblist -> miblen=4
[*] off_au=224 len_au=256  off_cau=480 len_cau=256  off_ah=904 len_ah=8

=== iter 0: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=156
    xu_addr tail                 (242 B): 00009877 ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 
                                        00009877 ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff2000 00000000 00004c86 6d4900f8 
                                        ffff805c 7281ffff ffff0086 6d4900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=236 -> leak[480..736) non-zero=168
    xu_caddr leak                (256 B): ec027681 ffffffff ec027381 ffffffff 00000100 00000000 cb339a80 990e0000 
                                        c0027681 ffffffff c006f916 01f8ffff 20000000 00000000 990e0000 00000000 
                                        01000000 98020000 7076ef17 01f8ffff 99020000 49010000 00866d49 00f8ffff 
                                        a085e416 01f8ffff a0000000 00000000 03000000 00000000 00866d49 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 281b778d 00f8ffff 
                                        8084e416 01f8ffff 00004a00 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 332 / 506 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv����"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=154
    xu_addr tail                 (238 B): ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 00009877 
                                        ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff2000 00000000 00004c86 6d4900f8 ffff805c 
                                        7281ffff ffff0086 6d4900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=236 -> leak[480..736) non-zero=168
    xu_caddr leak                (256 B): ec027681 ffffffff ec027381 ffffffff 00000100 00000000 cb339a80 990e0000 
                                        c0027681 ffffffff c006f916 01f8ffff 20000000 00000000 990e0000 00000000 
                                        01000000 98020000 7076ef17 01f8ffff 99020000 49010000 00866d49 00f8ffff 
                                        a085e416 01f8ffff a0000000 00000000 03000000 00000000 00866d49 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 281b778d 00f8ffff 
                                        8084e416 01f8ffff 00004a00 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 330 / 502 possible
  rec 2 leaked = 314 / 484 possible (al=18 cl=18)
  rec 3 leaked = 314 / 484 possible (al=18 cl=18)
  rec 4 leaked = 314 / 484 possible (al=18 cl=18)
  rec 5 leaked = 313 / 483 possible (al=19 cl=18)
  rec 6 leaked = 313 / 483 possible (al=19 cl=18)
  rec 7 leaked = 313 / 483 possible (al=19 cl=18)
  rec 8 leaked = 313 / 483 possible (al=19 cl=18)
  rec 9 leaked = 313 / 483 possible (al=19 cl=18)
  rec 10 leaked = 313 / 483 possible (al=19 cl=18)
  rec 11 leaked = 313 / 483 possible (al=19 cl=18)
  rec 12 leaked = 313 / 483 possible (al=19 cl=18)
  --- iter 0 subtotal: 4108 leaked non-zero bytes / 6324 possible ---

=== iter 1: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log945_7���"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=158
    xu_addr tail                 (242 B): 3934355f 371701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 
                                        00009877 ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff0100 00000000 00004cd8 694900f8 
                                        ffff805c 7281ffff ffff00d8 694900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=108 -> leak[480..736) non-zero=172
    xu_caddr leak                (256 B): 6cf57581 ffffffff 6cf57281 ffffffff 69760100 00000000 f8e5c080 ffffffff 
                                        3876ef17 01f8ffff 18fdc080 ffffffff 01000000 00000000 630e0000 00000000 
                                        00906289 00f8ffff 00000000 01f8ffff 63020000 49010000 00d86949 00f8ffff 
                                        a085e416 01f8ffff 74000000 00000000 03000000 00000000 00d86949 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 381c778d 00f8ffff 
                                        8084e416 01f8ffff 00404700 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 338 / 506 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv7���"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=154
    xu_addr tail                 (238 B): 371701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 00009877 
                                        ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff0100 00000000 00004cd8 694900f8 ffff805c 
                                        7281ffff ffff00d8 694900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=108 -> leak[480..736) non-zero=172
    xu_caddr leak                (256 B): 6cf57581 ffffffff 6cf57281 ffffffff 69760100 00000000 f8e5c080 ffffffff 
                                        3876ef17 01f8ffff 18fdc080 ffffffff 01000000 00000000 630e0000 00000000 
                                        00906289 00f8ffff 00000000 01f8ffff 63020000 49010000 00d86949 00f8ffff 
                                        a085e416 01f8ffff 74000000 00000000 03000000 00000000 00d86949 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 381c778d 00f8ffff 
                                        8084e416 01f8ffff 00404700 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 334 / 502 possible
  rec 2 leaked = 316 / 484 possible (al=18 cl=18)
  rec 3 leaked = 316 / 484 possible (al=18 cl=18)
  rec 4 leaked = 316 / 484 possible (al=18 cl=18)
  rec 5 leaked = 315 / 483 possible (al=19 cl=18)
  rec 6 leaked = 315 / 483 possible (al=19 cl=18)
  rec 7 leaked = 315 / 483 possible (al=19 cl=18)
  rec 8 leaked = 315 / 483 possible (al=19 cl=18)
  rec 9 leaked = 315 / 483 possible (al=19 cl=18)
  rec 10 leaked = 315 / 483 possible (al=19 cl=18)
  rec 11 leaked = 315 / 483 possible (al=19 cl=18)
  rec 12 leaked = 315 / 483 possible (al=19 cl=18)
  --- iter 1 subtotal: 4140 leaked non-zero bytes / 6324 possible ---

=== iter 2: 11856 bytes / 13 records (recsize=912) ===
  rec 0 (xu_unpp=0xfffff8008edf0660 sun_path="/var/run/log945_7���"):
    xu_addr.sun_len=14 -> tail[238..480) non-zero=158
    xu_addr tail                 (242 B): 3934355f 371701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff 
                                        ffff0000 4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 
                                        00009877 ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff 
                                        ffff0000 00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff 
                                        ffff0000 01000000 0000eef7 9a80ffff ffff0200 00000000 00004cd9 634900f8 
                                        ffff805c 7281ffff ffff00d9 634900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff 
                                        ffff0700 00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff 
                                        ffff0010 00000000 00000000 00000004 0000
    xu_caddr.sun_len=172 -> leak[480..736) non-zero=171
    xu_caddr leak                (256 B): acf57581 ffffffff acf57281 ffffffff 69760100 00000000 cb339a80 640e0000 
                                        80f57581 ffffffff 4082f816 01f8ffff 02000000 00000000 640e0000 00000000 
                                        01000000 63020000 7076ef17 01f8ffff 64020000 49010000 00d96349 00f8ffff 
                                        a085e416 01f8ffff 75000000 00000000 03000000 00000000 00d96349 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 381c778d 00f8ffff 
                                        8084e416 01f8ffff 00504700 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 0 leaked = 337 / 506 possible
  rec 1 (xu_unpp=0xfffff8008edf0730 sun_path="/var/run/logpriv7���"):
    xu_addr.sun_len=18 -> tail[242..480) non-zero=154
    xu_addr tail                 (238 B): 371701f8 ffff0000 00000000 00009875 ef1701f8 ffff8341 9a80ffff ffff0000 
                                        4a000800 00008084 e41601f8 ffff0000 00000000 00000000 00000000 00009877 
                                        ef1701f8 ffff0000 00000000 00009875 ef1701f8 ffff2741 9a80ffff ffff0000 
                                        00000700 000075df 9a80ffff ffff7875 ef1701f8 ffffad00 9b80ffff ffff0000 
                                        01000000 0000eef7 9a80ffff ffff0200 00000000 00004cd9 634900f8 ffff805c 
                                        7281ffff ffff00d9 634900f8 ffff4876 ef1701f8 ffffb43d 9b80ffff ffff0700 
                                        00000000 00008084 e41601f8 ffff2877 ef1701f8 ffff6a9c 9a80ffff ffff0010 
                                        00000000 00000000 00000004 0000
    xu_caddr.sun_len=172 -> leak[480..736) non-zero=171
    xu_caddr leak                (256 B): acf57581 ffffffff acf57281 ffffffff 69760100 00000000 cb339a80 640e0000 
                                        80f57581 ffffffff 4082f816 01f8ffff 02000000 00000000 640e0000 00000000 
                                        01000000 63020000 7076ef17 01f8ffff 64020000 49010000 00d96349 00f8ffff 
                                        a085e416 01f8ffff 75000000 00000000 03000000 00000000 00d96349 00f8ffff 
                                        a876ef17 01f8ffff 00000000 00000000 00000000 00000000 381c778d 00f8ffff 
                                        8084e416 01f8ffff 00504700 08000000 8876ef17 01f8ffff 357a9a80 ffffffff 
                                        f877ef17 01f8ffff f877ef17 01f8ffff a876ef17 01f8ffff facc9980 ffffffff 
                                        00000000 00000000 00000000 00000000 0879ef17 01f8ffff 9de69980 ffffffff 
    xu_alignment_hack -> [904..912) non-zero=8
    xu_alignment_hack            (8 B): 90870e81 ffffffff 
    >>> rec 1 leaked = 333 / 502 possible
  rec 2 leaked = 315 / 484 possible (al=18 cl=18)
  rec 3 leaked = 315 / 484 possible (al=18 cl=18)
  rec 4 leaked = 315 / 484 possible (al=18 cl=18)
  rec 5 leaked = 314 / 483 possible (al=19 cl=18)
  rec 6 leaked = 314 / 483 possible (al=19 cl=18)
  rec 7 leaked = 314 / 483 possible (al=19 cl=18)
  rec 8 leaked = 314 / 483 possible (al=19 cl=18)
  rec 9 leaked = 314 / 483 possible (al=19 cl=18)
  rec 10 leaked = 314 / 483 possible (al=19 cl=18)
  rec 11 leaked = 314 / 483 possible (al=19 cl=18)
  rec 12 leaked = 314 / 483 possible (al=19 cl=18)
  --- iter 2 subtotal: 4127 leaked non-zero bytes / 6324 possible ---

==== SUMMARY over 3 iters, 39 records: 12375 leaked non-zero bytes (of 18972 possible) ====
result: LEAK CONFIRMED (kernel-stack residue in xunpcb via pcblist sysctl)