DF-3316 / manifest.json
{ "verdict": "not_reproduced", "impact": "none", "finding_id": "DF-3316", "reproduce": { "build": "cc -O2 -Wall -o tcp_pcb_race tcp_pcb_race.c", "run": "./run.sh 300 (or for best churn exposure: 2x 'tcp_pcb_race -r 300' + 'tcp_pcb_race -c 300 16', all as nobody)", "expected": "success criterion = kernel panic (marker/list corruption) or garbage records in the dump; observed on the stock INVARIANTS guest across 3 runs (up to 3.7M unpriv teardowns x 685k walks): clean runs, guest healthy - the nanosecond advance window was never intersected (see VERDICT.md)" }, "kernel_refs": [ "sys/netinet/tcp_subr.c:1261-1307", "sys/netinet/in_pcb.c:265", "sys/netinet/in_pcb.c:1210-1226" ], "artifacts": [ "tcp_pcb_race.c", "build.sh", "run.sh", "run.log", "run.2.log", "fix.diff", "env.txt", "VERDICT.md", "verdict.json", "manifest.json" ] } |