⬢ DragonFlyBSD Kernel Audit
DF-5344 / fix_run.log
← back to finding ↓ download raw
# Fix validation run — patched kernel (DragonFly 6.5-DEVELOPMENT #1: Sat Oct 3
# 05:06:43 UTC 2026, only change = findings/poc/DF-5344/fix.diff), booted with
# the IDENTICAL hostile CPUID brand: -cpu qemu64,model-id=<48 x 'A'>
# (boot: QEMU_EXTRA="-cpu qemu64,model-id=AAAA..." ./dfbsd-qemu/vm.sh up)
$ sysctl -n hw.model | wc -c
      48                       <- BASELINE (stock kernel) was 49: 48 brand bytes + \n
$ sysctl -n hw.model | od -c | head -4
0000000   A   A   A   A   A   A   A   A   A   A   A   A   A   A   A   A
*
$ dmesg | grep -m1 "^CPU:"
CPU: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA (3600.01-MHz K8-class CPU)
                                  ^ 47 A's (baseline: 48) — cpu_brand[47] forced
                                    to '\0' by the fix; strcpy() now terminates
                                    IN-BOUNDS; guest boots/runs normally.