⬢ DragonFlyBSD Kernel Audit
DF-5016 / run.log
← back to finding ↓ download raw
# DF-5016 decisive transcript excerpts
[Race execution]
RACING
realloc: 274432 iters   (uid 65534, ~20s, scroll writer concurrently appending)
still-alive (at 20s mark)
[shortly after: kernel panic - later identified as the GENERIC ioctl-token
 assertion; see generic-ioctl-token-assert.txt; signature: lwkt_reltokref
 count assertion, NOT a wild write]
[Attributed manifestation: panic #1, same campaign family, unpriv churn
 (pagedaemon kprintf flood x flip-driven reallocs), no keyboard input:]
Fatal trap 12: page fault while in kernel mode
fault virtual address = 0xffffffff7ffffffe
fault code = supervisor write data, page not present
Stopped at sc_vtb_bcopy+0x34: movw %dx,(%rsi,%rax,2)
[Controls]
CONS_CLRHIST-only loop: token-assert panic (generic)
TIOCGWINSZ-only loop (never enters syscons): token-assert panic (generic) -> confound isolated
[Fix validation, patched kernel #2]
race soak: realloc: 353280 iters + scroll appends, 20s, PATCHED_ALIVE, no vtb-class fault