⬢ DragonFlyBSD Kernel Audit
DF-5450 / run.2.log
← back to finding ↓ download raw
DF-5450 run.2.log — first baseline run (before guest reset), single alloc/activate/release cycle
Guest: DragonFly 6.5-DEVELOPMENT #0 X86_64_GENERIC, QEMU/KVM
Command: kldload /root/poc/nxmap/nxmap.ko; dmesg | tail -8

nxmap0: <nexus activate idempotence PoC> on motherboard
DF-5450: err2ndact=0 vaddr1=0xffffffff82601000 vaddr2=0xffffffff82602000 same_phys=YES
DF-5450: kernel_map size before=3676196864 after2nd=3676205056 afterrelease=3676200960 (leaked pages: 1)
DF-5450: orphan vaddr1 read after full release: 0 (stale RW PTE still present: YES)

Single cycle: kernel_map grew 8192 bytes (two mappings), release returned
4096 (one mapping) => net 1 page (4096 bytes) permanently leaked; the first
mapping's vaddr was still readable after full release.