⬢ DragonFlyBSD Kernel Audit
DF-3318 / leak_sample.txt
← back to finding ↓ download raw
setup.c: In function 'main':
setup.c:133:2: warning: 'memset' writing 8 bytes into a region of size 0 overflows the destination [-Wstringop-overflow=]
  memset(&ifra.ifra_prefixmask.sin6_addr + 8, 0x00, 8);
  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gif0: flags=808011<UP,POINTOPOINT,MULTICAST,PROXY> metric 0 mtu 1280
	inet6 2001:db8::1 --> 2001:db8::2 prefixlen 128
	inet6 fe80::8c70:4df9:fc70:9151%gif0 prefixlen 64 scopeid 0x3
	inet6 2001:db8::5 prefixlen 64
===LEAK1===
addr.sin6_len=28 family=28 prefixlen=128 flags=00000000
dstaddr.sin6_len=200 family=28 addr=2001:db8::2
---- dstaddr bytes [0..127] ----
  0: c8 1c 00 00 00 00 00 00 20 01 0d b8 00 00 00 00 
 16: 00 00 00 00 00 00 00 02 00 00 00 00 1c 1c 00 00 
 32: 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff 
 48: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 
 64: c0 97 30 4f 00 f8 ff ff 00 00 00 00 00 00 00 00 
 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
 96: ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 
112: 00 00 00 00 00 00 00 00 b0 98 30 4f 00 f8 ff ff 
---- candidate kernel pointers at bytes>=28 ----
  off  32: 0xffffffff00000000
  off  64: 0xfffff8004f3097c0
  off  92: 0xffffffff00000000
  off 120: 0xfffff8004f3098b0
===LEAK2===
addr.sin6_len=28 family=28 prefixlen=128 flags=00000000
dstaddr.sin6_len=200 family=28 addr=2001:db8::2
---- dstaddr bytes [0..127] ----
  0: c8 1c 00 00 00 00 00 00 20 01 0d b8 00 00 00 00 
 16: 00 00 00 00 00 00 00 02 00 00 00 00 1c 1c 00 00 
 32: 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff 
 48: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 
 64: c0 97 30 4f 00 f8 ff ff 00 00 00 00 00 00 00 00 
 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
 96: ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 
112: 00 00 00 00 00 00 00 00 b0 98 30 4f 00 f8 ff ff 
---- candidate kernel pointers at bytes>=28 ----
  off  32: 0xffffffff00000000
  off  64: 0xfffff8004f3097c0
  off  92: 0xffffffff00000000
  off 120: 0xfffff8004f3098b0
===LEAK3===
addr.sin6_len=28 family=28 prefixlen=128 flags=00000000
dstaddr.sin6_len=200 family=28 addr=2001:db8::2
---- dstaddr bytes [0..127] ----
  0: c8 1c 00 00 00 00 00 00 20 01 0d b8 00 00 00 00 
 16: 00 00 00 00 00 00 00 02 00 00 00 00 1c 1c 00 00 
 32: 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff 
 48: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 
 64: c0 97 30 4f 00 f8 ff ff 00 00 00 00 00 00 00 00 
 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
 96: ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 
112: 00 00 00 00 00 00 00 00 b0 98 30 4f 00 f8 ff ff 
---- candidate kernel pointers at bytes>=28 ----
  off  32: 0xffffffff00000000
  off  64: 0xfffff8004f3097c0
  off  92: 0xffffffff00000000
  off 120: 0xfffff8004f3098b0