⬢ DragonFlyBSD Kernel Audit
DF-5375 / run.patched.log
← back to finding ↓ download raw
# DF-5375 fix-validation (patched kernel #3, targsim rig loaded)
root@dfbsd# ./poc5375
[*] DF-5375: targsim bus=2; open+enable target mode
[+] target mode enabled; injecting func_code=XPT_SCSI_IO (0x901) via write()
[*] write() queued opcode -> targstart -> targsendccb -> xpt_action -> SIM completes -> targdone panic NOW
[-] write returned -1 (errno=22) - no panic?
[-] still alive - NOT reproduced
# guest alive; baseline (kernel #0) panicked: targdone: impossible xpt opcode 0x901