⬢ DragonFlyBSD Kernel Audit
DF-3914 / run.log
← back to finding ↓ download raw
=== run 3914 ===
DF-3914 object-level proof
  mapping_table alloc      : 264 entries (8448 bytes)
  num_rsvd_entries         : 1
  enclosure NumSlots (fw)  : 2048
  reservation loop wrote   : [1, 2049)
  table end                : 264  -> overflow of 1785 entries (57120 bytes)
  guard[+0..] physical_id == 0x5141524153534141 at 1785/4096 entries (stride 32)
  kernel equivalent        : 57120-byte write of fw-controlled data past a 8448-byte kmalloc slab object
RESULT: OOB WRITE PRIMITIVE PROVEN (canary smash with attacker value, 32-byte stride)
E14=0