DragonFlyBSD Kernel Audit
DF-2859 / run.log
← back to finding ↓ download raw
DF2859 caseA: BEFORE split
DF2859 A.orig.before: nseg=6
DF2859 A.orig.before   seg[0] paddr=0x0000000000100000 len=0x1000
DF2859 A.orig.before   seg[1] paddr=0x0000000000130000 len=0x1000
DF2859 A.orig.before   seg[2] paddr=0x0000000000160000 len=0x1000
DF2859 A.orig.before   seg[3] paddr=0x0000000000190000 len=0x1000
DF2859 A.orig.before   seg[4] paddr=0x00000000001c0000 len=0x1000
DF2859 A.orig.before   seg[5] paddr=0x00000000001f0000 len=0x1000
DF2859 caseA: split(len=0x1000) error=0
DF2859 A.head: nseg=1
DF2859 A.head   seg[0] paddr=0x0000000000100000 len=0x1000
DF2859 A.orig.after: nseg=5
DF2859 A.orig.after   seg[0] paddr=0x0000000000130000 len=0x1000
DF2859 A.orig.after   seg[1] paddr=0x0000000000130000 len=0x1000
DF2859 A.orig.after   seg[2] paddr=0x0000000000160000 len=0x1000
DF2859 A.orig.after   seg[3] paddr=0x0000000000190000 len=0x1000
DF2859 A.orig.after   seg[4] paddr=0x00000000001c0000 len=0x1000
DF2859 caseA: EXPECTED orig.after = P1..P5 (5 distinct segs)
DF2859 caseA: BUG REPRODUCED (stale/duplicated segs)
DF2859 caseB: BEFORE split
DF2859 B.orig.before: nseg=6
DF2859 B.orig.before   seg[0] paddr=0x0000000000100000 len=0x1000
DF2859 B.orig.before   seg[1] paddr=0x0000000000130000 len=0x1000
DF2859 B.orig.before   seg[2] paddr=0x0000000000160000 len=0x1000
DF2859 B.orig.before   seg[3] paddr=0x0000000000190000 len=0x1000
DF2859 B.orig.before   seg[4] paddr=0x00000000001c0000 len=0x1000
DF2859 B.orig.before   seg[5] paddr=0x00000000001f0000 len=0x1000
DF2859 caseB: split(len=0x1800) error=0
DF2859 B.head: nseg=2
DF2859 B.head   seg[0] paddr=0x0000000000100000 len=0x1000
DF2859 B.head   seg[1] paddr=0x0000000000130000 len=0x800
DF2859 B.orig.after: nseg=5
DF2859 B.orig.after   seg[0] paddr=0x0000000000130800 len=0x800
DF2859 B.orig.after   seg[1] paddr=0x0000000000130800 len=0x800
DF2859 B.orig.after   seg[2] paddr=0x0000000000160000 len=0x1000
DF2859 B.orig.after   seg[3] paddr=0x0000000000190000 len=0x1000
DF2859 B.orig.after   seg[4] paddr=0x00000000001c0000 len=0x1000
DF2859 caseB: EXPECTED orig.after = [0x0000000000130800/0x800, P2, P3, P4, P5]
DF2859 caseB: BUG REPRODUCED (stale/duplicated segs)
DF2859 caseC: split(len=0x3000) error=0 survivors=1 (bcopy read segs[3..5], segs[4..5] OOB of 4-seg alloc)
DF2859 C.orig.after: nseg=1
DF2859 C.orig.after   seg[0] paddr=0x0000000000190000 len=0x1000
DF2859: verdict: BUG REPRODUCED