β¬’ DragonFlyBSD Kernel Audit
← triage Β· dashboard
DF-5828

Received-message CRCs (hdr_crc, aux_crc) are never validated

Summary

The transmit side computes aux_crc and hdr_crc but the receive path never verifies either field for incoming messages β€” the CRC fields are stored and ignored. An active on-path attacker (MITM on the TCP link between cluster nodes) can tamper with message bodies undetected; combined with DF-5825-class state-machine weaknesses this removes a defense-in-depth layer the protocol documents as required integrity (dmsg.h:187-196). Impact limited to integrity of an already trust-free channel (the peer itself gains nothing). Verify-iscsi_crc32-and-drop-link fix proposed.

Discussion (0)

No comments yet.

PoC verification

Evidence pack

findings/poc/DF-5828 Β· 1 files
FileTypeDescriptionSize
verdict.json file 1.0 KB view raw

Fix verification

not_testable
baseline no→ patch + rebuild →patched clean
per-fix-DF-5828

Confirmed kernel references

Detail

Evidence (decisive lines)

static trace; cross-refs in DF-5825 evidence pack

Verified recommended fix

verify hdr_crc/aux_crc on receive

Verdict

untested (Info/Low hardening or race-bound leak - Phase V not applicable or not economical per contract; DF-5825 pack carries the transport proof)