⬢ DragonFlyBSD Kernel Audit
DF-2835 / run.log
← back to finding ↓ download raw
uid=1001 euid=1001 SYS_vmspace_create=486
[1] create(id=NULL,        type=0,   data=NULL) -> rc=0 errno=0 (ACCEPTED)  want -1/EINVAL
[2] create(id=NULL, ...) again            -> rc=-1 errno=17 (File exists)  EEXIST proves NULL is a live RB key
    => NULL id really resides in the per-proc vmspace RB tree
[3] create(id=0x40000000, type=123, data=0xdead0000) -> rc=0 errno=0 (ACCEPTED)  want -1/EINVAL
[4] create(id=0x40000001, type=0,   data=NULL) -> rc=0 errno=0 (OK)  want 0 (legit use unchanged)
[c] destroy(id=NULL)       -> rc=0 errno=0
[c] destroy(id=0x40000000)    -> rc=0 errno=0
[c] destroy(id=0x40000001)    -> rc=0 errno=0
RESULT: null_id_accepted=1 typed_args_ignored=1
VERDICT: BUG REPRODUCED -- documented ABI contract not enforced
EXIT=0