DF-3467 / manifest.json
{ "finding_id": "DF-3467", "verdict": "not_reproduced", "impact": "none", "confidence": "likely", "reproduce": { "build": "gcc -O -pthread -o raceuid raceuid.c", "run": "ipfw3 add 100 allow udp from any to any uid 1001; ./raceuid 60 (x3 rounds)", "expected": "Attempted and not reproduced. The vulnerable code path was exercised at full rate: ipfw3+ipfw3_basic+ipfw3_layer4 loaded on the stock guest, rule '100 allow udp from any to any uid 1001' active, and s" }, "kernel_refs": [ "sys/net/ipfw3_layer4/ip_fw3_layer4.c:120", "sys/net/ipfw3_layer4/ip_fw3_layer4.c:130", "sys/net/ipfw3_layer4/ip_fw3_layer4.c:136" ], "artifacts": [ "README.md", "VERDICT.md", "env.txt", "fix.diff", "manifest.json", "raceuid.c", "run.log", "verdict.json" ] } |