DF-2681 / run.sh
#!/bin/sh # DF-2681 run: kldload the module; attach installs # bus_generic_delete_resource as the bus method and immediately calls # bus_delete_resource() on its child. # Expected (vulnerable kernel): kldload never returns; the console shows # "dfrec0 on motherboard" # "dfrec: attached, calling bus_delete_resource() on child" # and then the kernel livelocks (module lock held forever by the # self-dispatching thread; kldstat/ps hang; system must be power-cycled). # A non-tail-call build instead overflows the kernel stack (panic). kldload /tmp/df2681/dfrec.ko echo "returned (bug fixed)" |