⬢ DragonFlyBSD Kernel Audit
DF-4599 / run.log
← back to finding ↓ download raw
# Baseline runs, STOCK kernel (DragonFly 6.5-DEVELOPMENT #0 Thu Jul 2 06:02:54), vinum kldload'ed, as root.
# run 1 (100s, initial version without array-growth churn): survived
racing CREATE(growth) vs RESETCONFIG(free_vinum) vs SDCONFIG for 100s...
reader: 1597552 sdconfigs
resetter: 566522 resetconfigs (173517 volumes created)
survived 100s without a panic
poc rc=0

# run 2 (240s, growth-churn version, thread plexor added):
racing CREATE(growth) vs RESETCONFIG(free_vinum) vs SDCONFIG for 240s...
*** GUEST DIED ***
# (ssh output ended without worker counters; vm.sh status => down)
# panic signature from serial console (panic.txt):
Fatal trap 12: page fault while in kernel mode
cpuid = 5; lapic id = 5
fault virtual address = 0xfffff80119a18000
fault code = supervisor read data, page not present
instruction pointer = 0x8:0xffffffff809d75cc
current process = 958 (resetconfig_race)
Stopped at strcmp+0xc: movzbl (%rdi,%rax,1),%edx

# run 3 (240s, same binary as run 2): survived
racing CREATE(growth) vs RESETCONFIG(free_vinum) vs SDCONFIG for 240s...
reader: 3402189 sdconfigs
resetter: 1372670 resetconfigs (311698 volumes created)
survived 240s without a panic
poc rc=0

# => baseline: guest killed in 1 of 3 runs by the race; decisive UAF-read page fault in strcmp