⬢ DragonFlyBSD Kernel Audit
DF-3562 / fix_run.log
← back to finding ↓ download raw
== serpoob against PATCHED code (baseline had 3/3 faults) ==
== Case A: key_len=-64 -> u32-wrapped lk=0xFFFFFFFF -> runaway l_key[] fill loop ==
child(key_len=-64): returned normally?!
key_len=-64                  child exited 0 (no fault)
== Case B: key_len=-32 -> i=(u32)-1 -> access at l_key[0xFFFFFFFF] (+16GiB) ==
child(key_len=-32): returned normally?!
key_len=-32                  child exited 0 (no fault)
== Case C: key_len=129 -> 3-byte OOB read past key buffer (guard page) ==
child: returned without fault
key_len=129                  no fault (status 0)
== RESULT: 0/3 fault demonstrations ==
rc=1 (1 == 0/3 faults == fixed)

== KAT corpus against PATCHED code ==
== RESULT: 6349 checks, 0 fails ==