DF-3333 / env.txt
Guest environment for DF-3333 verification (2026-09-11).
uname -a:
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64
kern.ident = X86_64_GENERIC, 6 CPUs, 4 GB RAM, virtio (vtnet0, lo0).
# netmap subsystem availability on this guest/tree (same as DF-3332)
- /dev/netmap does not exist; kldload netmap -> "No such file or directory";
cd /usr/src/sys/net/netmap && make -> 15 hard errors
('struct ifnet' has no member named 'if_unused7', netmap_kern.h:747);
no sys/conf/files entry, no kernel config includes netmap.
=> verbatim-function KLD approach (df3333_kmod.c) used instead.
# PoC module builds (final successful): build.log
# Decisive runs (dmesg.txt, run.log, run.fixed.log):
1. vulnerable: 4194302 lie-pairs -> hwcur=2048 hwavail=0 -> transmit wrote
slot[1024] (lim=1023): OOB WRITE CONFIRMED past end of slot array.
2. fixed (rxpos modulo): transmit used slot[0], no write past ring end.