DragonFlyBSD Kernel Audit
DF-2614 / run.fix.log
← back to finding ↓ download raw
+ D=/root/poc/df2614
+ mkdir -p /root/poc/df2614
+ vnconfig -u vn0
+ dd 'if=/dev/zero' 'of=/root/poc/df2614/img' 'bs=1m' 'count=128'
+ vnconfig -c vn0 /root/poc/df2614/img
+ newfs_hammer2 -L testvol /dev/vn0
+ mkdir -p /mnt/h2poc
+ cc -O -I/usr/src/sys -o /root/poc/df2614/df2614_trigger /root/poc/df2614/df2614_trigger.c
+ dmesg
+ /root/poc/df2614/df2614_trigger 1000
+ echo 'TRIGGER_RC=0'
TRIGGER_RC=0
+ sleep 1
+ dmesg
+ echo '=== baseline counts (before) ==='
=== baseline counts (before) ===
+ grep -c 'volconf update' /root/poc/df2614/dmesg.before
+ B_VC=0
+ echo 'BEFORE_volconf=0'
BEFORE_volconf=0
+ grep -c RCVMSG /root/poc/df2614/dmesg.before
+ B_RX=0
+ echo 'BEFORE_rcvmsg=0'
BEFORE_rcvmsg=0
+ echo '=== new lines ==='
=== new lines ===
+ grep -c 'volconf update' /root/poc/df2614/dmesg.after
+ A_VC=0
+ echo 'AFTER_volconf=0'
AFTER_volconf=0
+ grep -c RCVMSG /root/poc/df2614/dmesg.after
+ A_RX=0
+ echo 'AFTER_rcvmsg=0'
AFTER_rcvmsg=0
+ echo 'DELTA_volconf=0'
DELTA_volconf=0
+ echo 'DELTA_rcvmsg=0'
DELTA_rcvmsg=0
+ echo '--- volconf lines (the leaked pointer values) ---'
--- volconf lines (the leaked pointer values) ---
+ grep 'volconf update' /root/poc/df2614/dmesg.after
+ tail -8
+ echo '--- TRANSMIT lines ---'
--- TRANSMIT lines ---
+ grep -c 'TRANSMIT VOLCONF' /root/poc/df2614/dmesg.after
0
+ true
+ echo '--- RCVMSG sample ---'
--- RCVMSG sample ---
+ head -3
+ grep RCVMSG /root/poc/df2614/dmesg.after
+ echo '--- trigger stdout ---'
--- trigger stdout ---
+ cat /root/poc/df2614/trigger.out
REMOTE_ADD_OK copyid=1
FLOOD_START=1000
FLOOD_SENT=1000 in 0.005 s => kernel consumed+printed 219444 msg/s
UNMOUNT_OK
TRIGGER_DONE
+ vnconfig -u vn0
+ echo RUN_DF2614_DONE
RUN_DF2614_DONE