⬢ DragonFlyBSD Kernel Audit
DF-5434 / run.vuln2.log
← back to finding ↓ download raw
HARNESS DF-5434[A1]: marker=0x5a round start
HARNESS DF-5434[A1]: req1 -> mem=0xfffff80118320000 count=4 size=0x10000
HARNESS DF-5434[A1]: after sell1 buf3: mem=0xfffff80118320000 offset=0x30000 bytesused=0x1000 status=2 (still linked as product head)
HARNESS DF-5434[A1]: req2(count=1) -> NEW mem=0xfffff80118320000 (OLD mem=0xfffff80118320000 was kfree'd; buf3 NOT re-inited: mem=0xfffff80118320000 status=2 bytesused=0x1000; product head=0xfffff800905e5f50 == buf3? YES)
HARNESS DF-5434[A1]: victim=0xfffff80118360000 (reclaimed old mem? no)
HARNESS DF-5434[A1]: after sell2 (wrote 0xa5 x 0x800 at OLDmem+3*0x10000+0x1000)
Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0xfffff80118330000
fault code		= supervisor read data, page not present
current process		= 818
Stopped at      mode_a+0x342:   cmpb    (%rax),%r10b