DF-2813 / run.sh
#!/bin/sh # DF-2813 - run the PoC on the guest (as root). # Expected (bug present): # - ARM drains exactly ncpus*2*magcap + cluster_limit objects # - sleeper thread on cpu5 enters ssleep "objcache_get" and stays stuck # for the full ~10 s observation window even though PROBE(cpu0) # returns an object from cpu0's loaded magazine # - RESCUE (fill both cpu0 magazines -> depot cycle + wakeup(depot)) # wakes it in milliseconds set -e cd /home/maxx/ochang kldunload ochang 2>/dev/null || true kldload ./ochang.ko sleep 1 ./ochang_drv echo "---- dmesg tail ----" dmesg | tail -25 echo "---- unloading ----" kldunload ochang |