DF-5169 / run.fix.log
BUILD_RC=0 SELFFREE: loaded; use sysctl debug.selffree=1 SELFFREE: struct work_struct size=32 worker=16 on_queue=24 running=25 canceled=26; selffree size=96 SELFFREE[0]: freed+reclaimed @0xfffff8011748a080; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[1]: freed+reclaimed @0xfffff8011748a0e0; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[2]: freed+reclaimed @0xfffff8011748a140; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[3]: freed+reclaimed @0xfffff8011748a1a0; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[4]: freed+reclaimed @0xfffff8011748a200; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[5]: freed+reclaimed @0xfffff8011748a260; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[6]: freed+reclaimed @0xfffff8011748a2c0; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE[7]: freed+reclaimed @0xfffff8011748a320; running byte=41 (poison=41) worker qword=4141414141414141 (poison=4141414141414141) (running byte untouched) (worker qword untouched) -> post-func writes did NOT touch the freed item (fixed behavior) SELFFREE: SUMMARY freed=8 reclaimed=8 uaf_running_write=0 uaf_worker_null_write=0 SELFFREE: VERDICT FIXED - freed+reclaimed work item was not touched after func() returned