⬢ DragonFlyBSD Kernel Audit
DF-5844 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
{
  "finding_id": "DF-5844",
  "verdict": "reproduced",
  "impact": "panic",
  "reproduce": {
    "build": "cd /root/rig && make && cc -O -o trigger trigger.c && cp trigger /tmp/trigger && chmod 755 /tmp/trigger",
    "run": "kldload /root/rig/deepoid.ko && su -m nobody -c /tmp/trigger",
    "expected": "unpatched: Fatal trap 9 in sysctl_sysctl_next with frame pointer 0x4141410d4141410c, guest drops to DDB; patched (fix.diff): walk finishes with ENOENT, guest stays up"
  },
  "kernel_refs": [
    "sys/kern/kern_sysctl.c:719",
    "sys/kern/kern_sysctl.c:727",
    "sys/kern/kern_sysctl.c:733",
    "sys/kern/kern_sysctl.c:749",
    "sys/kern/kern_sysctl.c:786",
    "sys/kern/kern_sysctl.c:791",
    "sys/sys/sysctl.h:55"
  ],
  "artifacts": [
    "deepoid.c", "Makefile", "trigger.c", "build.sh", "run.sh",
    "build.log", "panic.txt", "panic.root-run.txt", "fix_validation.log",
    "env.txt", "fix.diff", "VERDICT.md", "manifest.json", "verdict.json"
  ]
}