DF-5591 / trigger.sh
#!/bin/sh # DF-5591 runtime evidence: values on the live guest match the STATIC # initializer (proving the initialized path, i.e. the uninit branch never ran), # and devinfo resource ranges are readable by an unprivileged user (the # leak-out channel if the branch ever activated). set -e echo "### dmesg: vga0 windows (expect 0x3c0-0x3df / 0xa0000-0xbffff == static init)" dmesg | grep '^vga0' || true echo echo "### static initializer constants (source):" echo " IO_VGA=0x3C0 (isareg.h:124), size 32 (vga.c:176-177 initializer)" echo " EGA_BUF_BASE=0xa0000, EGA_BUF_SIZE=0x20000 (vgareg.h:40-41)" echo echo "### devinfo -rv vga0 (run as UNPRIVILEGED user if invoked as such):" devinfo -rv 2>/dev/null | grep -A5 '^ *vga0$' | head -8 |