⬢ DragonFlyBSD Kernel Audit
DF-2902 / run.sh
← back to finding ↓ download raw
1
2
3
4
#!/bin/sh
# DF-2902 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
dd 256MB zero image; vnconfig -c -S 512 vn0 image; kenv mbrprobe.blksize=262144 && kldload a/mbrprobe_a.ko  (leg A: panic at subr_diskmbr.c:128); reset; kenv mbrprobe.blksize=2147483648 && kldload b/mbrprobe_b.ko  (leg B: assertion bypass + 2GiB copy into 128KB pbuf -> kernel write page fault in memmove)