⬢ DragonFlyBSD Kernel Audit
DF-3107 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
{
  "finding_id": "DF-3107",
  "verdict": "NOT_REPRODUCED (defect code-certain; effect race not won in bounded stress)",
  "impact": "none observed; realistic ceiling = wrong-mount VGET on vnode-recycle race (cross-fs rename-guard confusion) or read of reclaimed vnode",
  "confidence": "likely",
  "reproduce": {
    "build": "(none)",
    "run": "(as root on guest) sh /root/df3107/stress.sh",
    "expected": "No visible effect in bounded time (race); defect established by code path: vput(vp) at ufs_lookup.c:1160 drops intermediate ancestors to refcount 0, then :1161 reads vp->v_mount."
  },
  "kernel_refs": [
    "sys/vfs/ufs/ufs_lookup.c:1160",
    "sys/vfs/ufs/ufs_lookup.c:1161",
    "sys/vfs/ext2fs/ext2_lookup.c:1235",
    "sys/kern/vfs_lock.c:345"
  ],
  "artifacts": ["stress.sh", "run.sh", "build.sh", "stress.log", "env.txt", "README.md", "verdict.json", "manifest.json"]
}