⬢ DragonFlyBSD Kernel Audit
DF-2803 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
  "finding_id": "DF-2803",
  "verdict": "reproduced",
  "impact": "dos",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -O2 -Wall -o harness harness.c -lprop && cc -O2 -Wall -o churn churn.c",
    "run": "sh /tmp/df2803_run.sh   (root; churn runs as user maxx)",
    "expected": "vmstat -m propdict in-use climbs linearly while the root reader is stalled (288 -> 226K in 19s from one unpriv pty-churn process); harness reports 'backlog drained: ~240000 events (185 MB)'; counters return to baseline after drain"
  },
  "kernel_refs": [
    "sys/kern/kern_udev.c:500-532",
    "sys/kern/kern_udev.c:517",
    "sys/kern/kern_udev.c:534-545",
    "sys/kern/kern_udev.c:826-830",
    "sys/kern/kern_udev.c:973-979",
    "sys/kern/kern_udev.c:1039-1041",
    "sys/vfs/devfs/devfs_core.c:1428",
    "sys/vfs/devfs/devfs_core.c:1451",
    "sys/kern/tty_pty.c:176"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "harness.c", "churn.c", "build.sh", "run.sh",
    "build.log", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"
  ]
}