⬢ DragonFlyBSD Kernel Audit
DF-3500 / manifest.json
← back to finding ↓ download raw
{
  "finding_id": "DF-3500",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "cd /usr/src/sys/netgraph/fec && patch -s < ../DF-3499/fix.diff && make",
    "run": "kldload ng_socket; kldload ./ng_fec.ko; ngctl mkpeer fec c0 c1   # facet 1; facets 2/3 via fecdrive.ko create/add/shutdown",
    "expected": "facet 1: panic 'try holding ifnet lock in netisr' in ifnet_lock <- if_attach <- ng_fec_constructor; facet 2: IS_SERIALIZED panic in lwkt_serialize_exit <- ng_fec_stop <- ng_fec_rmnode; facet 3: ifnet_serialize_array_assert panic in vtnet_serialize_assert <- ng_fec_delport"
  },
  "kernel_refs": ["sys/netgraph/fec/ng_fec.c:1137", "sys/netgraph/fec/ng_fec.c:549", "sys/netgraph/fec/ng_fec.c:1222", "sys/netgraph/fec/ng_fec.c:454", "sys/net/if.c:3787"],
  "artifacts": ["README.md", "VERDICT.md", "panic_ctor_netisr.txt", "panic_rmnode_delport.txt", "verdict.json", "manifest.json"]
}