DragonFlyBSD Kernel Audit
DF-2692 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-2692",
  "verdict": "untested (structural)",
  "impact": "none (not demonstrated)",
  "reproduce": {
    "build": "n/a",
    "run": "n/a - see VERDICT.md for the staging design (vfork/RFSIGSHARE sigacts cluster + cross-CPU kill hammer)",
    "expected": "kernel memory corruption of a freed M_SUBPROC chunk (8-byte pid/uid write at ps_frominfo[sig]); panic if the chunk is reused"
  },
  "kernel_refs": [
    "sys/kern/kern_sig.c:1336-1354",
    "sys/kern/kern_sig.c:1425",
    "sys/kern/kern_sig.c:228-242",
    "sys/kern/kern_exec.c:413-421"
  ],
  "artifacts": ["VERDICT.md", "verdict.json", "manifest.json"]
}