⬢ DragonFlyBSD Kernel Audit
DF-5365 / fix_run.log
← back to finding ↓ download raw
DF5365: MSR_APICBASE=0xfee00c00 -> real APIC page 0xfee00000
DF5365: lapic_mem=0 (production state)
DF5365: offsets: lint0=0x350 lint1=0x360 err=0x370 pcint=0x340 tmr=0x320 tpr=0x80 svr=0xf0 eoi=0xb0 dcr=0x3e0 icr_tm=0x380
LAPIC: bogus LAPIC address 0xd9d8000 in firmware table, using 0xfee00000 from APIC base MSR
DF5365: A: mapped attacker PA 0xd9d8000 (kva 0xfffff80116c7e000)
DF5365: A: LAPIC_MEM_READ(version)=ffffffff (attacker fill 0xaaaaaaaa) READ-PRIMITIVE ?
DF5365: A: svr=0xaaaaaaaa lint0=0xaaaaaaaa lint1=0xaaaaaaaa tmr=0xaaaaaaaa (fill was 0xaaaaaaaa)
DF5365: A: 0/7 register cells of the attacker page were written by the production store set -> partial
LAPIC: bogus LAPIC address 0x18d9dac in firmware table, using 0xfee00000 from APIC base MSR
DF5365: B: mapped kernel BSS PA 0x18d9dac so that 'icr_timer' aliases cpu_id_to_apic_id[3]
DF5365: B: cpu_id_to_apic_id[3] before=0x00000003
DF5365: B: cpu_id_to_apic_id[3] after =0x00000003 -> KERNEL-BSS CORRUPTION not-confirmed
DF5365: state restored (cpu_id_to_apic_id[3]=0x00000003 lapic_mem=0)
DF5365: done