⬢ DragonFlyBSD Kernel Audit
DF-3478 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
{
  "finding_id": "DF-3478",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "cc -o step_listen step_listen.c   (guest)",
    "run": "kldload netgraph.ko ng_bluetooth.ko ng_btsocket.ko; ./step_listen   (as any user)",
    "expected": "console: 'STEP: bind done' then 'DOUBLE FAULT / panic: double fault', rip=so_pru_listen+0x4d; guest dead in DDB. With fix.diff applied: 'STEP: ALL OK'."
  },
  "kernel_refs": [
    "sys/netgraph7/bluetooth/socket/ng_btsocket_l2cap.c:2460",
    "sys/kern/uipc_socket.c:343",
    "sys/kern/uipc_msg.c:351"
  ],
  "artifacts": ["README.md", "VERDICT.md", "step_listen.c", "build.sh", "run.sh", "panic.txt", "fix.diff", "verdict.json", "manifest.json"]
}