⬢ DragonFlyBSD Kernel Audit
DF-5830 / run.2.log
← back to finding ↓ download raw
DF-5830 — run.2.log — FRESH-BOOT RE-CONFIRMATION
(Guest was `vm.sh reset with-src` (force-kill + clean-source snapshot revert +
fresh boot) after the wedge run documented in run.3.log, then the PoC was
rebuilt and re-run once on the stock kernel of the fresh boot.)

  root# netstat -m | sed -n 1p
  7/146632 mbufs in use (current/max):

  root# cc -O2 -o /tmp/df5830_leak /tmp/leaksendmsg.c && echo REBUILT
  REBUILT

  maxx$ /tmp/df5830_leak 20000
  OK: 20000 sendmsg calls on regular-file fd (all ENOTSOCK)

  root# netstat -m | sed -n 1p
  20007/146632 mbufs in use (current/max):

=> The leak reproduces identically from a fresh boot of the clean-source
   snapshot: exactly +20000 permanent mbufs for 20000 unprivileged failing
   sendmsg(2) calls carrying ancillary data.