⬢ DragonFlyBSD Kernel Audit
DF-3131 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-3131",
 "verdict": "reproduced",
 "impact": "corruption",
 "confidence": "likely",
 "reproduce": {
  "build": "guest: cc -O -o race2 race2.c -lpthread",
  "run": "guest: race2 /dev/vn0 /mnt/raceroot 800",
  "expected": "GARBLED mntfromname lines proving the ignored copyinstr + stale-size memset executed; OOB variant depends on the stale stack value"
 },
 "kernel_refs": [
  "sys/vfs/msdosfs/msdosfs_vfsops.c:281-282",
  "sys/vfs/msdosfs/msdosfs_vfsops.c:229-236"
 ],
 "artifacts": [
  "race_mount.c",
  "race2.c",
  "run.log",
  "README.md",
  "VERDICT.md",
  "build.sh",
  "run.sh",
  "manifest.json",
  "verdict.json",
  "fix.diff",
  "env.txt"
 ]
}