⬢ DragonFlyBSD Kernel Audit
DF-3261 / manifest.json
← back to finding ↓ download raw
{
 "finding_id": "DF-3261",
 "verdict": "reproduced",
 "impact": "denial_of_service",
 "confidence": "certain",
 "reproduce": {
  "build": "guest: cc -O -o addset addset.c (raw IP_FW_ADD with exact ipfw_ioc_rule layout)",
  "run": "guest: kldload ipfw + staged allow rule; addset 40 1000; addset 200 1001; addset 8 1002; ping; ipfw set disable 8; ping; ipfw show",
  "expected": "sets 40/200 install; set disable 8 freezes all three rules counters; set move 40 rejected"
 },
 "kernel_refs": [
  "sys/net/ipfw/ip_fw2.c:4518",
  "sys/net/ipfw/ip_fw2.c:3601"
 ],
 "artifacts": [
  "addset.c",
  "run.log",
  "README.md",
  "VERDICT.md",
  "build.sh",
  "run.sh",
  "manifest.json",
  "verdict.json",
  "fix.diff",
  "env.txt"
 ]
}