⬢ DragonFlyBSD Kernel Audit
DF-5711 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
{
  "finding_id": "DF-5711",
  "verdict": "reproduced",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "part of the DF-5710 rig: sh findings/poc/DF-5710/build.sh",
    "run": "./harness_netmap_clamp",
    "expected": "bdg_basename has NUL within [0,16)? -> NO; strlen(bdg_basename): 47 (reads through adjacent canary)"
  },
  "kernel_refs": [
    "sys/net/netmap/netmap_vale.c:331",
    "sys/net/netmap/netmap_vale.c:352",
    "sys/net/netmap/netmap_vale.c:198",
    "sys/net/netmap/netmap_kern.h:80"
  ],
  "artifacts": ["harness_netmap_clamp.c", "fix.diff", "run.log", "README.md", "VERDICT.md", "manifest.json", "verdict.json"]
}