DragonFlyBSD Kernel Audit
DF-2894 / fix_run.log
← back to finding ↓ download raw
# DF-2894 fix validation run — same loader.conf plant, same PoC, FIXED kernel #1
# (kernel DragonFly 6.5-DEVELOPMENT #1: Wed Sep  2 22:58:18 UTC 2026, fix.diff applied)

# boot-time behavior (dmesg):
WARNING: kenv: oversize entry (713 bytes), ignoring string audit.smash=AAAA...

# dynamic table after boot:
$ kenv | grep -c '^audit.smash='
0                       <- oversize entry no longer ingested
$ kenv | grep '^audit.hello='
audit.hello="PANGRAM_CONTROL"   <- legit entries unaffected

# exact PoC re-run (as maxx, uid=1001):
$ /tmp/df2894_trigger audit.hello
kenv GET audit.hello OK, val[0..15]=PANGRAM_CONTROL
CONTROL_EXIT=0
$ /tmp/df2894_trigger audit.smash
df2894_trigger: kenv(KENV_GET, audit.smash): No such file or directory
TRIGGER_EXIT=1
ssh_rc=0

$ vm.sh status
up                      <- guest healthy; no panic, no wedge

# BASELINE (unfixed, same plant + PoC): Fatal trap 9 GPF, frame pointer
#   0x4141414141414141, fault at kgetenv.part.4+0xea ret, guest down in DDB.
# PATCHED: ENOENT + guest up. Fix confirmed.