⬢ DragonFlyBSD Kernel Audit
DF-3315 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3315",
  "verdict": "not_reproduced (structural race confirmed; no observable fault under ~6e9 window-exposures vs ~7M teardowns)",
  "impact": "none (demonstrated); potential panic/UAF if scheduler semantics change",
  "reproduce": {
    "build": "cc -O2 -Wall -o pcb_race pcb_race.c",
    "run": "./pcb_race -c 300 96 &  su maxx -c '/tmp/df3315/pcb_race -r 280'",
    "expected": "kernel panic (LIST corruption / wild deref) or garbage records in dump - NOT observed in 3 rounds"
  },
  "kernel_refs": [
    "sys/netinet/in_pcb.c:2456-2476",
    "sys/netinet/in_pcb.c:1210-1226",
    "sys/netinet/raw_ip.c:115",
    "sys/netinet/tcp_subr.c:1226-1300"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "pcb_race.c",
    "build.sh",
    "run.sh",
    "build.log",
    "run.log",
    "env.txt",
    "fix.diff",
    "manifest.json",
    "verdict.json"
  ]
}