⬢ DragonFlyBSD Kernel Audit
DF-5451 / run.2.log
← back to finding ↓ download raw
DF-5451 run.2.log — first baseline run (before guest reset)
Guest: DragonFly 6.5-DEVELOPMENT #0 X86_64_GENERIC, QEMU/KVM

nxget0: <nexus get_resource printf PoC> on motherboard
nxget0: type 3  rid 7  startp 0xfffff801183a3718  countp 0xfffff801183a3720 - got 0xfffff8008dc22e00
DF-5451: bus_get_resource returned 0 start=0xe0000000 count=0x1000 (the leaked-pointer line above came from nexus.c:567)

and in /var/log/messages (line 986):
Oct  5 17:45:13 dfbsd kernel: nxget0: type 3  rid 7  startp 0xfffff801183a3718  countp 0xfffff801183a3720 - got 0xfffff8008dc22e00

Unprivileged read confirmed in the same run:
  $ id -> uid=1001(maxx) gid=1001(maxx)
  $ dmesg | grep -c startp  -> 1
  $ grep -c startp /var/log/messages -> 1