DF-3082 / manifest.json
{ "finding_id": "DF-3082", "title": "ext2 htree-indexed directory create truncates the directory mid-tree (mass silent data loss on valid images, then ext2_dirbad panic)", "impact": "panic+data-loss", "verdict": "reproduced / fix validated", "reproduce": { "build": "host: cd findings/poc/DF-3082 && sh craft.sh; guest: scp htree.img vntool.c to /root; cc -O2 -o /root/vntool /root/vntool.c", "run": "guest root: sh mount.sh; guest maxx: sh trigger.sh", "expected": "stock kernel: 'after touch zzq001: entries=36' (65 entries destroyed), then panic 'ext2_dirbad: ... offset 3072: mangled entry' with ext2_htree_lookup in the trace; patched kernel: entries grow 100->140, zero vanished, no panic" }, "kernel_refs": [ "sys/vfs/ext2fs/ext2_lookup.c:377-397", "sys/vfs/ext2fs/ext2_lookup.c:478-505", "sys/vfs/ext2fs/ext2_lookup.c:948-954", "sys/vfs/ext2fs/ext2_htree.c:381-418", "sys/vfs/ext2fs/ext2_vnops.c:1229", "sys/vfs/ext2fs/ext2_vnops.c:1784" ], "artifacts": [ "README.md", "VERDICT.md", "craft.sh", "mount.sh", "trigger.sh", "fix_run.sh", "fix.diff", "vntool.c", "run.log", "mount.log", "panic.txt", "fix_run.log", "fix_mount.log", "build.log.gz", "verdict.json", "manifest.json", "env.txt" ] } |