DF-3333 / run.log
# DF-3333 vulnerable run (DragonFly 6.5-DEVELOPMENT, real kernel, verbatim fns in KLD) # $ kldload /usr/obj/root/df3333/df3333.ko && sysctl -n debug.df3333.trigger=1 0 -> 0 df3333: loaded df3333: choreography start (target hwcur>lim with hwavail<lim) df3333: after 4194302 pairs: hwcur=2048 hwavail=0 (0x0) <-- hwcur OUT OF RANGE df3333: transmit used slot index 1024 (lim = 1023) <-- OUT OF BOUNDS df3333: RESULT OOB WRITE CONFIRMED at slot[1024] (1 slots past end of ring) [VULNERABLE]