⬢ DragonFlyBSD Kernel Audit
DF-4964 / run.log
← back to finding ↓ download raw
TRIGGER: map=fffff80118930000 (64KB real), driver told BAR2=4096 bytes
TRIGGER: canary@+0x7014 before = deadbeef, canary@+0x7000 before = cafebabe
TRIGGER: calling sili_port_alloc(sc, port=3)
contigmalloc_map: failed size 4096 low=0 high=fff align=8 boundary=0 flags=00000102
pci0.3: NOSGET
TRIGGER: canary@+0x7014 after  = 00000fff
TRIGGER: canary@+0x7000 after  = 00000001
TRIGGER: *** OOB MMIO WRITES PROVEN at +0x7014 and +0x7000 (INT_DISABLE/CTL_SET landed outside the 4KB BAR2 window) ***
TRIGGER: sili_port_alloc returned 12
TRIGGER: unloaded, guest still alive
TRIGGER: fake_bar=fffff80118a4c000, driver told BAR2=4096 bytes
TRIGGER: canary@+0x7014 before = deadbeef, canary@+0x7000 before = cafebabe
TRIGGER: calling sili_port_alloc(sc, port=3)
contigmalloc_map: failed size 4096 low=0 high=fff align=8 boundary=0 flags=00000102
pci0.3: NOSGET
TRIGGER: canary@+0x7014 after  = 00000fff
TRIGGER: canary@+0x7000 after  = 00000001
TRIGGER: *** OOB MMIO WRITES PROVEN at +0x7014 and +0x7000 (INT_DISABLE/CTL_SET landed outside the 4KB BAR2 window) ***
TRIGGER: sili_port_alloc returned 12
TRIGGER: unloaded, guest still alive
TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract)
TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12
TRIGGER: unloaded, guest still alive
module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2
TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract)
TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12
TRIGGER: unloaded, guest still alive
module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2
TRIGGER: dbg kmem_alloc(2MB) = fffff80118b50000
TRIGGER: dbg extract(b+0x7000)=00000000 extract(b+0x7014)=00000014
TRIGGER: PANIC MODE, fake BAR2 base=00000000 (targets +0x7000 provably unmapped via pmap_extract)
TRIGGER: first OOB write will land at 00007014 -- expect Fatal trap 12
TRIGGER: unloaded, guest still alive
module_register_init: MOD_LOAD (df4964, ffffffff82600000, 0) error 2
TRIGGER: dbg kmem_alloc(2MB) = fffff80118b60000
TRIGGER: dbg extract(b+0x7000)=00000000 extract(b+0x7014)=00000014
TRIGGER: PANIC MODE, fake BAR2 base=fffff80118c60000 (targets +0x7000 provably unmapped via pmap_extract)
TRIGGER: first OOB write will land at fffff80118c67014 -- expect Fatal trap 12
TRIGGER: fake_bar=fffff80118c60000, driver told BAR2=4096 bytes
TRIGGER: calling sili_port_alloc(sc, port=3)


Fatal trap 12: page fault while in kernel mode
cpuid = 1; lapic id = 1
fault virtual address	= 0xfffff80118c67014
fault code		= supervisor write data, page not present
instruction pointer	= 0x8:0xffffffff80309b90
stack pointer	        = 0x10:0xfffff80118a4b6f8
frame pointer	        = 0x10:0xfffff80118a4b738
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 2781
current thread          = pri 6 
kernel: type 12 trap, code=2

CPU1 stopping CPUs: 0x0000003d
 stopped
Stopped at      sili_port_alloc+0x360:  movl    $0xfff,0x1014(%rdx)
db>