⬢ DragonFlyBSD Kernel Audit
DF-3369 / build.log
← back to finding ↓ download raw
# KLD builds in guest (out-of-tree, -I/usr/src/sys, bsd.kmod.mk):
#   /root/df3369:      make          -> df3369.ko       (vulnerable, verbatim)
#   /root/df3369f:     make          -> df3369f.ko      (-DDD3368_FIXED prepended)
# Both compile clean with -Werror (stock gcc 8.3 [DragonFly] Release/2019-02-22):
BUILD-3368-OK   (VULN-3368-OK)
FIXED-3368-OK
-rw-r--r-- 1 root wheel 10856 Sep 11 14:25 /root/df3369/df3369.ko
-rw-r--r-- 1 root wheel 10888 Sep 11 14:25 /root/df3369f/df3369f.ko
# PoC harness bugs fixed during iteration (documented in VERDICT.md):
#  - v1 head-canary scan used u_int k-64 (own instrumentation fault, not the
#    verbatim code); v2 freed the scratch buffer before the mode-0/1 walkers
#    (own UAF).  Neither affects the verbatim function or the results; the
#    wild-write panic captured in run.crash.log occurred with v2 and is the
#    verbatim store itself (netmap_vale.c:1013).