⬢ DragonFlyBSD Kernel Audit
DF-3115 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-3115",
 "verdict": "reproduced",
 "impact": "denial_of_service",
 "confidence": "certain",
 "reproduce": {
  "build": "host: python3 craft_lfn.py out.img A|B",
  "run": "guest: vnconfig -c -S 2m /dev/vn0 img && mount_msdos -o ro /dev/vn0 /mnt && su -m nobody -c 100x ls/stat loop, count dmesg lines",
  "expected": "1212 non-decreasing lines + 100 too-large lines per 100 passes; console log floods"
 },
 "kernel_refs": [
  "sys/vfs/msdosfs/msdosfs_conv.c:1038",
  "sys/vfs/msdosfs/msdosfs_conv.c:1048",
  "sys/vfs/msdosfs/msdosfs_lookup.c:270",
  "sys/vfs/msdosfs/msdosfs_vnops.c:1662"
 ],
 "artifacts": [
  "craft_lfn.py",
  "run_guest.sh",
  "run.log",
  "console_flood_excerpt.log",
  "README.md",
  "VERDICT.md",
  "build.sh",
  "run.sh",
  "manifest.json",
  "verdict.json",
  "fix.diff",
  "env.txt",
  "compile_validation.txt"
 ]
}