⬢ DragonFlyBSD Kernel Audit
DF-4668 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
{
  "finding_id": "DF-4668",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "cc -O1 -o /tmp/snp_disc /tmp/snp_disc.c -lutil",
    "run": "kldload snp (root, once); /tmp/snp_disc (unprivileged user)",
    "expected": "kernel panic: Fatal trap 12, fault va 0x30, Stopped at snp_down+0x73: cmpq $0x1000,0x30(%rbx); ssh dies, guest in db>"
  },
  "kernel_refs": [
    "sys/dev/misc/snp/snp.c:129",
    "sys/dev/misc/snp/snp.c:135",
    "sys/dev/misc/snp/snp.c:514",
    "sys/dev/misc/snp/snp.c:517",
    "sys/kern/tty.c:1128",
    "sys/kern/tty_conf.c:79",
    "sys/kern/tty_conf.c:93",
    "sys/kern/tty_pty.c:406"
  ],
  "artifacts": ["snp_disc.c", "build.sh", "run.sh", "run.log", "panic.txt", "env.txt", "VERDICT.md", "fix.diff", "manifest.json", "verdict.json"]
}