⬢ DragonFlyBSD Kernel Audit
DF-5694 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "verdict": "reproduced",
  "impact": "rng_bias_aslr_entropy_loss",
  "reproduce": {
    "build": "cd /tmp/kld && make; cc -O2 -o arc4_harness arc4_harness.c -lm; cc -O2 -o chk chk.c -lm",
    "run": "kldload ./arc4samp.ko; cat /dev/arc4srep; dd if=/dev/arc4s64 bs=1048576 count=16 | ./chk /dev/stdin k64; ./arc4_harness bias64 10000000",
    "expected": "top32==0xffffffff fraction ~0.5000 in-kernel and in harness; patched harness 0.000000"
  },
  "kernel_refs": [
    "sys/libkern/arc4random.c:129",
    "sys/libkern/arc4random.c:132",
    "sys/libkern/arc4random.c:119-139",
    "sys/vm/vm_map.c:4408",
    "sys/vm/vm_map.c:4374",
    "sys/dev/drm/include/linux/random.h:49",
    "sys/dev/drm/i915/i915_gem_gtt.c:3986"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "arc4_harness.c", "arc4_harness_fixed.c",
    "arc4samp.c", "Makefile", "chk.c", "aslr_probe.c", "aslr2.c",
    "build.sh", "run.sh", "build.log", "run.log", "env.txt",
    "fix.diff", "manifest.json", "verdict.json"
  ]
}