⬢ DragonFlyBSD Kernel Audit
DF-4133 / run.log
← back to finding ↓ download raw
=== CONTROL (unfixed kernel): valid 87-byte config ===
$ vinum read /dev/vn0s1a
READ_RC=0
1 drives:
D x0                    State: up	Device /dev/vn0s1a	Avail: 5/0 MB

=== BASELINE (unfixed kernel): 131071-byte single config line ===
$ ./vinum_linemash2 /dev/vn0s1a 6
iter 0 .. (kernel console kvprintf's 60KB of 'A's via throw_rude_remark)
Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xfffff80118a60000
instruction pointer	= 0x8:0xffffffff82607640
current process		= 989 (vinum_linemash2)
Stopped at      vinum_scandisk+0x590:   cmpb $0xa,(%rax)     <- the vulnerable copy loop
[guest down in DDB]

=== FIXED KERNEL (#1 Fri Sep 18 04:22, line copy clamped to config_line[2047]) ===
$ ./vinum_linemash2 /dev/vn0s1a 6
iter 0
iter 1
iter 2
iter 3
iter 4
iter 5
survived 6 iterations
RC=0
[guest up; dmesg shows 12x "vinum: Invalid configuration information: AAA..."
= the truncated 2047-byte line is parsed and rejected cleanly each iteration]