⬢ DragonFlyBSD Kernel Audit
DF-3179 / fix_validation.log
← back to finding ↓ download raw
# fix validation (guest /usr/src patched with fix.diff; make -j4 nativekernel KERNCONF=X86_64_GENERIC -> BUILD_RC=0;
#  make installkernel -> INSTALL_RC=0; reboot -> kernel #1 Mon Sep  7 22:45:12 UTC 2026)
$ vmstat -m | grep tmpfs_dirent
       tmpfs_dirent   3.05M    390M    416M    390M    3.05M     # zone at cap after flood

# exact same PoC, same unprivileged user, same default /tmp:
links=3000000
linkflood: link(/tmp/df3179fix/df3179_b97_l17997): No space left on device
LINKFLOOD_EXITED rc=1
# guest: UP (no panic)   [baseline: panic: tmpfs dirent: malloc limit exceeded]

# after removing one batch of links (~32k dirents freed):
$ mkdir -p /tmp/df3179fix/sanity && echo hello > .../x && cat .../x
hello
RECOVERED_FS_USABLE