⬢ DragonFlyBSD Kernel Audit
DF-3206 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-3206",
 "verdict": "not_reproduced",
 "impact": "denial_of_service",
 "confidence": "likely",
 "reproduce": {
  "build": "host: python3 craft_dotdot_iso.py out.iso; guest: cc -O -o racer racer.c -lpthread",
  "run": "guest: mount_cd9660 -o ro /dev/vn2 /mnt && su -m nobody -c /tmp/racer /mnt 90",
  "expected": "expected occasional HIT lines (ino != root); observed zero in 32.2M iterations"
 },
 "kernel_refs": [
  "sys/vfs/isofs/cd9660/cd9660_lookup.c:343-345",
  "sys/vfs/isofs/cd9660/cd9660_lookup.c:260-261"
 ],
 "artifacts": [
  "craft_dotdot_iso.py",
  "racer.c",
  "run.log",
  "README.md",
  "VERDICT.md",
  "build.sh",
  "run.sh",
  "manifest.json",
  "verdict.json",
  "fix.diff",
  "env.txt"
 ]
}