⬢ DragonFlyBSD Kernel Audit
DF-3068 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
{
  "finding_id": "DF-3068",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "sh build.sh   (same padflood tool + base image as DF-3067)",
    "run": "sh run3068.sh  (craft v3 desync image: DUMMY@0xff0 + fake tail@0x1000, first=0x1000 next=0x1008, mount on vn1)",
    "expected": "panic: assertion \"error || bytes == 0\" failed in hammer_recover_stage1 at hammer_recover.c:460; guest wedged at db>"
  },
  "kernel_refs": [
    "sys/vfs/hammer/hammer_recover.c:225-226",
    "sys/vfs/hammer/hammer_recover.c:393-431",
    "sys/vfs/hammer/hammer_recover.c:460",
    "sys/vfs/hammer/hammer_recover.c:814-815",
    "sys/vfs/hammer/hammer_recover.c:901-924",
    "sys/vfs/hammer/hammer_recover.c:948-961",
    "sys/vfs/hammer/hammer_recover.c:1023-1026"
  ],
  "artifacts": [
    "padflood.c", "build.sh", "run3068.sh", "README.md", "VERDICT.md",
    "run.log", "panic.txt", "panic_console_full.txt",
    "env.txt", "fix.diff", "fix_build.log", "fix_run.log",
    "manifest.json", "verdict.json"
  ]
}