DF-2692 / manifest.json
{ "finding_id": "DF-2692", "verdict": "untested (structural)", "impact": "none (not demonstrated)", "reproduce": { "build": "n/a", "run": "n/a - see VERDICT.md for the staging design (vfork/RFSIGSHARE sigacts cluster + cross-CPU kill hammer)", "expected": "kernel memory corruption of a freed M_SUBPROC chunk (8-byte pid/uid write at ps_frominfo[sig]); panic if the chunk is reused" }, "kernel_refs": [ "sys/kern/kern_sig.c:1336-1354", "sys/kern/kern_sig.c:1425", "sys/kern/kern_sig.c:228-242", "sys/kern/kern_exec.c:413-421" ], "artifacts": ["VERDICT.md", "verdict.json", "manifest.json"] } |