⬢ DragonFlyBSD Kernel Audit
DF-4423 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "finding_id": "DF-4423",
  "verdict": "reproduced",
  "impact": "leak",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -O2 -pthread -o df4423_tester df4423_tester.c; make dfdetach.ko (bsd.kmod.mk, SYSDIR=/usr/src/sys)",
    "run": "sh killshot2.sh  (96x2MB pread volley on /dev/vbd0; kldload dfdetach.ko at t=5s; QEMU 'info blockstats' before/after)",
    "expected": "RESULT readvolley threads=96 ok_chunks=1344 STALE_chunks=0 foreign=192 errors=0 with all read_ms ~= 5000ms, and rd_bytes delta 17,956,864 vs 201,326,592 guest-success bytes (91% fabricated)"
  },
  "kernel_refs": [
    "sys/dev/virtual/virtio/block/virtio_blk.c:1202",
    "sys/dev/virtual/virtio/block/virtio_blk.c:1078",
    "sys/dev/virtual/virtio/block/virtio_blk.c:1103",
    "sys/dev/virtual/virtio/block/virtio_blk.c:532",
    "sys/dev/virtual/virtio/block/virtio_blk.c:543"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "df4423_tester.c", "dfdetach.c", "killshot2.sh",
    "build.sh", "run.sh", "run_ks2.out", "blockstats_s0.txt", "blockstats_s1.txt",
    "leak_sample_0.bin", "leak_sample_1.bin", "env_dmesg.txt", "fix.diff",
    "manifest.json", "verdict.json"
  ]
}