DF-4386 / manifest.json
{ "finding_id": "DF-4386", "status": "untested", "impact_class": "kernleak (device-gated)", "reproduce": { "build": "./build.sh", "run": "./run.sh", "expected": "guard-gate no-device line; then strlen() walked 87 bytes (+55 past the 32-byte buffer) - the kern_sysctl.c:1171 sink behavior" }, "kernel_refs": [ "sys/dev/netif/oce/oce_sysctl.c:84", "sys/dev/netif/oce/oce_mbox.c:289", "sys/kern/kern_sysctl.c:1171", "sys/dev/netif/oce/oce_if.h:835" ], "artifacts": [ "README.md", "VERDICT.md", "trigger.c", "build.sh", "run.sh", "run.log", "t6_guarded_run.log", "fix.diff", "env.txt", "manifest.json", "verdict.json", "trigger_replica.log" ] } |