DF-3368 / build.log
# KLD builds in guest (out-of-tree, -I/usr/src/sys, bsd.kmod.mk): # /root/df3368: make -> df3368.ko (vulnerable, verbatim) # /root/df3368f: make -> df3368f.ko (-DDD3368_FIXED prepended) # Both compile clean with -Werror (stock gcc 8.3 [DragonFly] Release/2019-02-22): BUILD-3368-OK (VULN-3368-OK) FIXED-3368-OK -rw-r--r-- 1 root wheel 10856 Sep 11 14:25 /root/df3368/df3368.ko -rw-r--r-- 1 root wheel 10888 Sep 11 14:25 /root/df3368f/df3368f.ko # PoC harness bugs fixed during iteration (documented in VERDICT.md): # - v1 head-canary scan used u_int k-64 (own instrumentation fault, not the # verbatim code); v2 freed the scratch buffer before the mode-0/1 walkers # (own UAF). Neither affects the verbatim function or the results; the # wild-write panic captured in run.crash.log occurred with v2 and is the # verbatim store itself (netmap_vale.c:1013).