⬢ DragonFlyBSD Kernel Audit
DF-3689 / run.log
← back to finding ↓ download raw
lookup table: 16 usable records (max_levels=16), count field=4
dep entries whose vddInd read lands past the 16-record kmalloc: 239 / 255
max index 255 -> byte offset 2550 past entries[0] (allocation holds 160 bytes of entries)
RESULT: HEAP OOB READ CONFIRMED at the arithmetic level - u8 vddInd indexes up to 255 into a 16-record table (also OOB vs count=4)
exit=0