DF-5587 / manifest.json
{ "finding_id": "DF-5587", "title": "cothread faults die silently: SA_NODEFER+empty-mask exc_segfault recurses unboundedly on %gs==0 (307833 re-entries, host kill, no panic/dump/diagnostic)", "verdict": "reproduced", "impact": "dos (latent trigger: cothread-side fault; silent whole-vkernel death)", "reproduce": { "build": "sh build.sh; cc -static -O2 -o corefixed corefixed.c", "run": "./coresig; ./corefixed", "expected": "coresig: RECURSION_DEPTH=307833 SILENT_DEATH_CONFIRMED; corefixed: 'vkernel: recursive fault in exc_segfault' + termsig=11 + FIX_SEMANTICS_OK" }, "kernel_refs": [ "sys/platform/vkernel64/x86_64/exception.c:222", "sys/platform/vkernel64/platform/cothread.c:143", "sys/platform/vkernel64/platform/machintr.c:205", "sys/platform/vkernel64/x86_64/trap.c:585" ], "artifacts": [ "coresig.c", "corefixed.c", "build.sh", "run.sh", "build_and_run.log", "fix_semantics.log", "fix.diff", "VERDICT.md", "README.md", "verdict.json", "manifest.json", "env.txt" ] } |