DF-3506 / manifest.json
{ "finding_id": "DF-3506", "verdict": "reproduced", "impact": "leak", "confidence": "certain", "reproduce": { "build": "cd /usr/src/sys/netgraph/fec && make # fechg.c staged as ng_fec.c", "run": "kldload ./ng_fec.ko; sysctl kern.fechg.op=create; sysctl kern.fechg.op='oob 8 4141414141414141'; dmesg | grep 'tried to add'", "expected": "REACHABILITY DISCOVERY THAT GATES ALL FOUR v1-fec FINDINGS: the shipped stock ng_fec.ko cannot create a node at all - ng_fec_constructor deterministically panics 'trying to free NULL pointer' in _kfre" }, "kernel_refs": [ "sys/netgraph/fec/ng_fec.c:1172", "sys/netgraph/fec/ng_fec.c:1177", "sys/netgraph/fec/ng_fec.c:345", "sys/netgraph/fec/ng_fec.c:348", "sys/netgraph/fec/ng_fec.c:272" ], "artifacts": [ "README.md", "VERDICT.md", "env.txt", "fec-sequence.log", "fechg.c", "fix.diff", "manifest.json", "ng_fec.harness.c", "panic.txt", "run.log", "verdict.json" ] } |