⬢ DragonFlyBSD Kernel Audit
DF-3381 / run.patched.log
← back to finding ↓ download raw
# DF-3381 on PATCHED kernel (fix.diff applied, make nativekernel, #1: Fri Sep 11 22:24:51 UTC 2026)
# command: /root/poc/t3381
[+] BIOCSBLEN -> 32
[+] uid=65534 euid=65534, binding to lo0 (bif_hdrlen=36 > bd_bufsize=32)
[-] survived
t3381-rc=0
t3381: BIOCSETIF(lo0): Invalid argument      <- child err(): bind now rejected (bpf_setif EINVAL)
# guest stayed up; identical PoC, baseline panic GONE.
# sanity (separate prog): normal lo0 capture works: read=176 bh_hdrlen=36 bh_caplen=38 bs_recv=2 SANITY-OK