Configuring syscons: blanktime.
Starting sshd.
sendmail_submit: /etc/mail/aliases.db not present,  generating
sendmail_clientmqueue: /etc/mail/aliases.db not present,  generating
Starting cron.
Local package initialization:.

Tue Oct 20 15:58:55 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: dfrig12: === test 3 begin ===
dfrig12: DF3045: selection at :1046-1053 ACCEPTED IFT_ETHER sdl_alen=17 (>16, never checked)
dfrig12: DF3045: call.hlen=17 (call.hlen=sdl_alen at :1192)
DF3045: call.chaddr[0..23] = 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 00 00 00 00 00 00 00
DF3045: chaddr member is 16 bytes; chaddr[16] (== call.sname[0]) = 50, expected MAC byte 0x50 -> bcopy at :1197 overran chaddr[16] by 1 byte(s)
dfrig12: DF3045: bcopy overran chaddr[16] by 1 byte(s): call.sname[0]=50 == MAC[16]=50
Sending DHCP Discover packet from interface fak0 (40:41:42:43:44:45:46:47:48:49:4a:4b:4c:4d:4e:4f:50)
dfrig12: client broadcasts query #1 xid_raw=0100ffff msgtype=1 (any same-L2 host hears it)
dfrig12: ATTACKER injects OFFER xid_raw=0100ffff origin=6.6.6.6:9999 yiaddr=6.6.6.66 siaddr=6.6.6.6
DF3045: reply matcher bcmp len=17: chaddr member is 16 bytes -> reads 1 byte(s) past chaddr[15] (in-struct, into sname/file/vend)
Received DHCP Offer packet on fak0 from 6.6.6.6 (accepted) (no root path)
Sending DHCP Request packet from interface fak0 (40:41:42:43:44:45:46:47:48:49:4a:4b:4c:4d:4e:4f:50)
dfrig12: client broadcasts query #2 xid_raw=0100ffff msgtype=3 (any same-L2 host hears it)
dfrig12: ATTACKER injects ACK xid_raw=0100ffff origin=6.6.6.6:9999 yiaddr=6.6.6.66 siaddr=6.6.6.6
DF3045: reply matcher bcmp len=17: chaddr member is 16 bytes -> reads 1 byte(s) past chaddr[15] (in-struct, into sname/file/vend)
Received DHCP Ack packet on fak0 from 6.6.6.6 (accepted) (got root path)
dfrig12: DF3045: matcher bcmp len=17 (1 byte(s) past chaddr[15] read on BOTH sides), bootpc_call error=0
dfrig12: === test 3 end ===
dfrig12: === test 5 begin ===
dfrig12: DF3045 T5a: as-shipped form alen=22: HEX_NCPYLEN=66 into 64-byte buffer: 2 byte(s) past end (offsets 0..1), pre intact=1
dfrig12: DF3045 T5b: alen=106: footprint=318: 254 smashed bytes (offsets 0..253), next intact post[254]=0xbb (scaling: alen=255 -> 701 bytes past end)
dfrig12: DF3045 T5c: fixed form (outlen=sizeof(hexstr)=64): 0 smashed byte(s) past end (expected 0), pre intact=1
dfrig12: === test 5 end ===
dfrig12: === test 4 begin ===
dfrig12: DF3044 T4: predicted-XID ACK with TAG_SUBNETMASK len=3 from 6.6.6.6:9999 -> expect verbatim panic 'bootpc: subnet mask len is 3' (bootp_subr.c:1390)
Sending DHCP Discover packet from interface vtnet0 (52:54:00:12:34:56)
dfrig12: client broadcasts query #1 xid_raw=0100ffff msgtype=1 (any same-L2 host hears it)
dfrig12: ATTACKER injects OFFER xid_raw=0100ffff origin=6.6.6.6:9999 yiaddr=6.6.6.66 siaddr=6.6.6.6
Received DHCP Offer packet on vtnet0 from 6.6.6.6 (accepted) (no root path)
Sending DHCP Request packet from interface vtnet0 (52:54:00:12:34:56)
dfrig12: client broadcasts query #2 xid_raw=0100ffff msgtype=3 (any same-L2 host hears it)
dfrig12: ATTACKER injects ACK xid_raw=0100ffff origin=6.6.6.6:9999 yiaddr=6.6.6.66 siaddr=6.6.6.6
Received DHCP Ack packet on vtnet0 from 6.6.6.6 (accepted) (got root path)
vtnet0 at 66.6.6.6 server 6.6.6.6
panic: bootpc: subnet mask len is 3
cpuid = 2
Trace beginning at frame 0xfffff801182c36d8
bootpc_init() at bootpc_init+0xce4 0xffffffff80a82d44 
bootpc_init() at bootpc_init+0xce4 0xffffffff80a82d44 
sysctl_df_test() at sysctl_df_test+0xcf 0xffffffff80a8316f 
sysctl_root.isra.5() at sysctl_root.isra.5+0x166 0xffffffff80683dd6 
userland_sysctl() at userland_sysctl+0x111 0xffffffff80684171 
sys___sysctl() at sys___sysctl+0x74 0xffffffff806842d4 
Debugger("panic")

CPU2 stopping CPUs: 0x0000003b
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdda09(%rip)
db>