⬢ DragonFlyBSD Kernel Audit
DF-4280 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
{
  "finding_id": "DF-4280",
  "verdict": "reproduced",
  "impact": "dos",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -O -o /tmp/df4280 /root/df4280x/trigger.c",
    "run": "sh /root/df4280x/run.sh",
    "expected": "vulnerable: CCDIOCCLR 'Device busy' forever + kldunload denied; patched: CCDIOCCLR ok + ccdconfig -u ok + kldunload ok"
  },
  "kernel_refs": [
    "sys/dev/disk/ccd/ccd.c:1434",
    "sys/kern/kern_conf.c:294",
    "sys/kern/subr_disk.c:763"
  ],
  "artifacts": [
    "trigger.c", "run.sh", "build.sh", "README.md", "VERDICT.md",
    "run.log", "fix_patched.log", "fix.diff", "env.txt",
    "verdict.json", "manifest.json"
  ],
  "fix": { "status": "fixed", "diff": "fix.diff (hunk 2)", "validated_on": "patched ccd.ko built in guest /usr/src" }
}