⬢ DragonFlyBSD Kernel Audit
DF-5015 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
{
 "verdict": "reproduced",
 "impact": "dos",
 "reproduce": {
  "build": "cc -O1 -o /tmp/df5015 /tmp/df5015.c (in guest)",
  "run": "see README.md (arm -> pressure churn -> flip loop -> monitor-key mismatch detection -> scroll-lock arm/fire cycles)",
  "expected": "marker-wrap artifact (rows>=2) proving 25-row ring vs 60-row screen; sysctl hw.df5015 rows=25 size=2000 ... ysize=60; post-fire ring views show executed appends; kernel write fault in sc_vtb_bcopy during the campaign (attributed to DF-5016)"
 },
 "kernel_refs": [
  "sys/dev/misc/syscons/schistory.c:118-160",
  "sys/dev/misc/syscons/schistory.c:211-215",
  "sys/dev/misc/syscons/schistory.c:219-234",
  "sys/dev/misc/syscons/schistory.c:244-259",
  "sys/dev/misc/syscons/scvtb.c:183-186",
  "sys/dev/misc/syscons/scvtb.c:221-235",
  "sys/dev/misc/syscons/scvtb.c:239-242",
  "sys/dev/misc/syscons/scvtb.c:198-211",
  "sys/dev/misc/syscons/scvidctl.c:146-163",
  "sys/dev/misc/syscons/scvidctl.c:382-397",
  "sys/dev/misc/syscons/syscons.c:3843-3933"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "df5015.c",
  "drive.py",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "off.c",
  "offmod2.c",
  "panic-offmod2-tool.log",
  "panic-scvtb_bcopy-unpriv-churn.log",
  "probe.c",
  "race5016.c",
  "round2.py",
  "round3.py",
  "round4.py",
  "round5.py",
  "round6.py",
  "run.log",
  "run.sh",
  "squeeze.c",
  "verdict.json",
  "watcher.sh"
 ]
}