⬢ DragonFlyBSD Kernel Audit
DF-3386 / run.fixed.log
← back to finding ↓ download raw
cbq configured: sizeof(class_stats_t)=264 sizeof(struct redstats)=56
active altq entries: 3, ticket=1
q_def is active entry nr=2

=== run 1 (nbytes=264) ===
handle field (offset 0, uninit): 0x00000002
qtype=0 (1=droptail,2=RED,3=RIO)  qcnt=0
full dump (0x41 == untouched prefill):
     0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    32: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    48: 00 00 00 00 00 00 00 00 01 00 00 00 19 00 00 00 
    64: e7 ff ff ff 01 00 00 00 1e 00 00 00 02 00 00 00 
    80: 00 00 00 00 00 00 00 00 19 00 00 00 00 00 00 00 
    96: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   112: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   144: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   176: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   192: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   224: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   256: 00 00 00 00 00 00 00 00 

=== run 2 (nbytes=264) ===
handle field (offset 0, uninit): 0x00000002
qtype=0 (1=droptail,2=RED,3=RIO)  qcnt=0
full dump (0x41 == untouched prefill):
     0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    32: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    48: 00 00 00 00 00 00 00 00 01 00 00 00 19 00 00 00 
    64: e7 ff ff ff 01 00 00 00 1e 00 00 00 02 00 00 00 
    80: 00 00 00 00 00 00 00 00 19 00 00 00 00 00 00 00 
    96: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   112: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   144: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   176: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   192: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   224: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   256: 00 00 00 00 00 00 00 00 

=== run 3 (nbytes=264) ===
handle field (offset 0, uninit): 0x00000002
qtype=0 (1=droptail,2=RED,3=RIO)  qcnt=0
full dump (0x41 == untouched prefill):
     0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    32: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
    48: 00 00 00 00 00 00 00 00 01 00 00 00 19 00 00 00 
    64: e7 ff ff ff 01 00 00 00 1e 00 00 00 02 00 00 00 
    80: 00 00 00 00 00 00 00 00 19 00 00 00 00 00 00 00 
    96: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   112: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   144: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   176: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   192: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   224: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
   256: 00 00 00 00 00 00 00 00 

Interpretation: any byte != 0x41 in the first 4 bytes (handle)
and in the last 168 bytes (red[3]) is uninitialized kernel stack
leaked to userspace.