DF-3262 / manifest.json
{ "finding_id": "DF-3262", "verdict": "not_reproduced", "impact": "leak", "confidence": "likely", "reproduce": { "build": "guest: addset via 2000 <16-byte-name> (same tool as DF-3261)", "run": "guest: addset via 2000 vtnet0[AAAAAAAAA; ipfw -S list; traffic; ipfw show 2000", "expected": "rule installs with no NUL in name[] (validation gap); never matches the control pattern" }, "kernel_refs": [ "sys/net/ipfw/ip_fw2.c:1355", "sys/net/ipfw/ip_fw2.c:5480-5483", "sys/libkern/fnmatch.c:56-175" ], "artifacts": [ "run.log", "README.md", "VERDICT.md", "build.sh", "run.sh", "manifest.json", "verdict.json", "fix.diff", "env.txt" ] } |