⬢ DragonFlyBSD Kernel Audit
DF-3087 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
{
  "finding_id": "DF-3087",
  "verdict": "reproduced (panic, certain) -- stock kernel #0, fresh reset; fix validated (kernel #1 + fix.diff, no panic)",
  "impact": "panic",
  "reproduce": {
    "build": "cc -O -o /root/kerbd kerbd.c",
    "run": "killall nfsd; sleep 1; /root/kerbd 20497",
    "expected": "stock kernel: 'nfssvc(NFSD) returned -1 errno=81' then 'resuming with NFSSVC_AUTHIN' then Fatal trap 12, fault VA 0x70, Stopped at sys_nfssvc+0x3d4: movl 0x70(%rdi),%eax, guest down. fixed kernel: resume completes, nfsd keeps serving, guest up."
  },
  "kernel_refs": [
    "sys/vfs/nfs/nfs_syscalls.c:448",
    "sys/vfs/nfs/nfs_syscalls.c:549-570",
    "sys/vfs/nfs/nfs_syscalls.c:609-623",
    "sys/vfs/nfs/nfs_syscalls.c:671",
    "sys/vfs/nfs/nfs_socket.c:2392-2434",
    "sys/vfs/nfs/nfs_socket.c:2897",
    "sbin/nfsd/nfsd.c:826-841"
  ],
  "artifacts": ["README.md", "VERDICT.md", "kerbd.c", "fix.diff", "run.sh", "run.log", "run.fixed.log", "panic.txt", "env.txt", "verdict.json", "manifest.json"]
}