⬢ DragonFlyBSD Kernel Audit
DF-3103 / leak_sample.txt
← back to finding ↓ download raw
# DF-3103 leak sample: EMB read(96) x3 (all OOB heap past the 512-byte fentry)
read() returned 96 bytes from embedded file (requested 96)
bytes returned (OOB kernel heap beyond 512-byte fentry): [96 bytes]
  0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0050: 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
DF3103_LEAK_CONFIRMED: 96 bytes copied from kernel heap at fentry->data[0x1000] (~3.7KB past a 512-byte M_UDFFENTRY allocation)
--
read() returned 96 bytes from embedded file (requested 96)
bytes returned (OOB kernel heap beyond 512-byte fentry): [96 bytes]
  0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0050: 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
DF3103_LEAK_CONFIRMED: 96 bytes copied from kernel heap at fentry->data[0x1000] (~3.7KB past a 512-byte M_UDFFENTRY allocation)
--
read() returned 96 bytes from embedded file (requested 96)
bytes returned (OOB kernel heap beyond 512-byte fentry): [96 bytes]
  0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  0050: 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
DF3103_LEAK_CONFIRMED: 96 bytes copied from kernel heap at fentry->data[0x1000] (~3.7KB past a 512-byte M_UDFFENTRY allocation)

# EMB2 wild pointer (l_ea=0x40000000):
--- EMB2 wild-pointer read (l_ea=0x40000000, +1GB past alloc) -- expect kernel panic ---
read(96) failed: Bad address
RUN_EMB2_EXIT=1