⬢ DragonFlyBSD Kernel Audit
DF-3033 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-3033",
 "title": "Unvalidated on-disk leaf->data_len used as length by the reblocker -> panic",
 "verdict": "reproduced",
 "impact": "panic",
 "reproduce": {
  "build": "guest cc",
  "run": "see run.sh/README",
  "expected": "leaf @phys 0x21088000 elm 5: obj_id=0000000100000633 key=4000 data_off=a000000022000000 data_len=16384"
 },
 "kernel_refs": [
  "sys/vfs/hammer/hammer_io.c:1948",
  "sys/vfs/hammer/hammer_io.c:1950",
  "sys/vfs/hammer/hammer_btree.c:736",
  "sys/vfs/hammer/hammer_reblock.c:321"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "craft_3033.c",
  "env.txt",
  "fix.diff",
  "fixkernel_second_panic.txt",
  "manifest.json",
  "panic.txt",
  "phase_hammer3033.sh",
  "run.log",
  "verdict.json"
 ]
}