Page MenuHomeFreeBSD
Authored By
tuexen
Sep 15 2019, 3:30 PM
Size
9 KB
Referenced Files
None
Subscribers
None
// autogenerated by syzkaller (https://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <pwd.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/endian.h>
#include <sys/syscall.h>
#include <unistd.h>
uint64_t r[1] = {0xffffffffffffffff};
int main(void)
{
syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x1012, -1, 0);
intptr_t res = 0;
res = syscall(SYS_socket, 0x1c, 1, 0);
if (res != -1)
r[0] = res;
memcpy(
(void*)0x20000240,
"\xec\xff\x93\x48\x71\x08\x20\x98\x60\x67\x19\x72\xf5\xee\x07\xa5\xf5\xcd"
"\xf1\x57\x7c\xa8\xe6\x06\xd5\xce\xe0\x65\x7c\x6a\x81\xd3\xdf\xfe\x40\xc4"
"\x22\x98\x9c\xd8\x41\xcb\x4a\x96\x36\x71\x91\xe3\x40\x9b\xbd\x7b\x51\x0c"
"\xdd\x38\xba\xbf\xc0\x8d\x1f\x38\x52\x10\xf3\xdf\x14\xed\xb1\x1b\xbe\x61"
"\x5e\x1c\x91\x60\x7f\x03\xa9\x52\x10\x41\x77\xea\x3c\xb9\x92\xa4\xff\xb1"
"\x52\x12\x37\x0b\xff\x18\x68\x74\x2f\xf9\x7b\x3b\x31\x1a\x76\x59\xf5\xcc"
"\xc9\x2e\xa4\xbe\x9c\x1e\xba\x4b\xb4\x69\x51\xb6\x08\xb4\x26\xb4\x6e\xad"
"\x2d\x19\xd0\x7e\x29\x02\x35\x08\x8f\x30\x2f\x4b\x68\x55\x43\xe0\xf1\x52"
"\xb2\x49\x39\xb5\x09\xf0\x51\x8f\x3c\x4d\xac\x13\x16\xe2\xaa\x21\x5a\x90"
"\x3e\xe5\x83\x89\x40\x01\x7c\x19\xcb\xe5\x5b\x56\xbc\x7a\xed\x6d\x2e\x53"
"\x72\x5c\xbd\x96\x09\x2f\xb1\xeb\xf3\x0b\x66\xc5\x0d\xed\x59\x76\x36\xe8"
"\xcd\x41\x6f\xfb\x01\x98\xea\x75\xd9\x3c\x3c\x00\xd4\xac\xad\x20\x99\x90"
"\xab\xd9\x48\xd7\x0a\xc7\xcb\x90\xa5\xbc\x33\x65\xbe\x31\x68\x4f\x32\x75"
"\xe0\xb8\x6c\x97\x81\xbd\xe6\x87\x77\x5e\x34\xb2\xff\x7b\xea\xd5\x39\xd5"
"\x26\xad\x35\x34\xe7\x63\xde\xed\x09\x63\xa9\xdd\x60\x21\xc0\x3a\xcb\x7c"
"\xbc\xc5\x1e\xf8\x66\x46\x85\x8c\xeb\x37\x65\x02\x9e\xe6\x91\xbf\xeb\xd7"
"\x41\x40\x10\xd0\xba\xff\x13\x31\x4c\xde\xe1\xcb\x45\x0a\x05\x06\xbb\x50"
"\xdb\x24\x73\x29\x8b\x03\xed\xb4\xe8\x56\x3e\x87\x7f\xd4\x6f\x92\x8b\x6d"
"\xff\x45\xd4\xc4\xed\xfc\xea\xad\x6c\x6d\x79\x7a\x3d\x88\x74\x03\x1e\x35"
"\x1d\xa5\x19\xae\x3b\x88\x3b\x18\x68\x5e\xe9\x7a\x22\x82\xfa\x48\xd9\x57"
"\xf8\x79\x98\xc9\x91\x00\xfc\x70\x69\xe4\x13\x2d\x69\x9a\x81\x9a\xc1\xd2"
"\x45\x4e\x55\xe7\x47\xc4\xd4\xd0\x47\x33\x20\xf8\x6d\x74\x6a\x37\x49\xaa"
"\xfd\xdd\xb8\x12\xc3\x40\xcd\xc6\x15\xe1\xfc\x04\xde\x0a\x97\xd7\x8a\xb7"
"\x8c\x40\x52\x13\x2e\xeb\x5e\xdc\xfe\xbb\x35\x71\xdf\x39\x2d\xc1\x57\xa1"
"\xe5\xf1\x2d\x94\xe1\x01\xb7\xde\x07\xe9\x18\xa0\x11\xcd\xf3\xaf\xff\x8f"
"\x06\x5a\x2f\x22\x08\x61\xf9\xb0\x92\x90\xc0\xd0\xe0\xcc\x6d\xbb\x64\xf1"
"\xf0\x72\x26\xed\xa0\x1f\x5f\x7b\xea\x5f\xba\xc4\xa7\xec\xb1\x38\x1c\x5a"
"\x84\x13\x9a\x16\xea\x81\x5d\xa6\xcf\x92\x6e\xaa\x1a\xf7\x81\xb4\x37\xbc"
"\xfa\xf1\xe0\x02\x6b\x6b\x1b\x60\x13\x5a\x88\xbe\x59\xa4\x62\x54\xfd\x41"
"\x45\xa5\x2d\x60\xde\xc3\xa6\x7d\xf5\x56\x75\xee\xf6\x2e\xac\x9a\x02\x00"
"\x1d\x26\x0f\x6a\x4e\xa8\xfd\x57\xcc\xfb\x37\x02\x3f\x93\x7e\x1c\xb4\xa2"
"\xf6\x86\x85\x2c\x83\x32\x24\x99\x9f\x2d\x20\x44\x40\x12\x58\x92\x20\x43"
"\x77\xd2\x74\x15\x5d\x4e\xd3\x5a\x06\xe4\x39\x36\xdc\x8a\x4e\x8c\x8b\xb6"
"\xba\x2b\xc0\x9c\xf4\xb5\x70\x6c\x1d\x2d\x93\x10\x7f\x66\x7a\xd0\xd1\xe5"
"\x0b\x3e\xce\x7e\x0c\x33\x21\x31\x77\x43\xbd\x5e\x2b\xda\xd2\x9e\x2a\xe1"
"\x4e\xaf\x25\xd9\xde\x15\x33\x12\xd3\xdc\x6e\xa9\xa9\x35\xc6\x05\x73\xc3"
"\x65\x0c\x68\x7c\xc0\xe7\xca\x87\x60\x91\x4b\x99\x3f\xfd\x30\x27\x33\x2b"
"\xc5\x69\xe3\x4f\xed\xac\xf1\xd8\x2d\x7e\xe2\xd4\x43\x5a\x21\x6f\x6a\x16"
"\xda\x33\x0a\x9c\x82\xc9\xfe\x6b\xa4\xf1\x81\xfd\x6d\x88\x84\x17\x45\x2d"
"\xd9\xbf\x16\x15\xeb\xa8\xcf\x13\x1b\x2e\x38\xfc\xb5\xe2\xcf\xb6\x8b\x8f"
"\xce\xb9\xda\xba\xc4\x81\xd9\x10\x16\x20\x64\x00\x3e\xed\xea\xb0\x4a\x97"
"\xbe\x99\xf9\x7f\xa3\x56\x38\x09\x74\xa2\x5c\xdb\xb1\x6d\x0d\xe1\xa2\xbb"
"\x29\x6d\xe9\xc1\x60\x46\x2a\x00\x63\x08\xc8\x29\x23\xad\x90\x9d\x80\xc1"
"\xb6\xb3\xd6\xc6\xd7\x3b\x58\x28\xe6\x08\xce\x42\xae\xfb\x1a\x16\x3a\x6c"
"\x83\xaf\x2d\x39\xb1\x93\x26\xeb\xb0\xff\xf4\x2c\x3e\x43\x30\x65\x2a\xae"
"\x32\x5c\xf2\xf6\x62\x4b\x6b\x22\x55\xab\x78\x65\x8c\xe3\xdb\x87\x6b\x89"
"\xe4\x80\x33\x9b\x43\xb9\x92\x41\x63\x8c\xe9\xd2\xa2\x01\xfd\xad\xaa\xda"
"\x4f\x07\xca\xee\x31\xa9\xc7\x5c\xc9\xbe\x2f\x40\xba\x5f\xe3\x11\xbe\x36"
"\xf0\x6a\xa3\xc3\x8f\x69\x7a\x55\xd6\x30\xa6\xe9\xa9\x50\xd6\x9e\x5e\xe0"
"\x16\x57\x72\xf7\x75\x33\x80\xab\x19\xb3\xf1\x62\x1a\xff\x9e\x3c\xab\x8c"
"\x9e\x3e\x13\x9b\x8d\x06\xa4\x23\x20\x39\x19\x8e\x2c\x49\xcd\x1c\x5f\x51"
"\x08\x60\x77\x4e\x62\xa7\x03\x40\xbc\x3a\x19\xeb\xff\x4b\xde\x14\xc2\x1e"
"\x24\x1e\xd9\x31\xd6\x5c\xca\x2b\x35\x65\xdb\x4b\xb4\xff\x79\x5d\x09\x5d"
"\xf7\xa6\x2e\x43\x91\xf3\x17\xa4\x4b\xf9\xb3\x7e\x48\x79\x77\x05\x51\x16"
"\x17\x41\x9d\x43\xa4\x2a\x43\x54\x42\x51\xad\xdd\x00\x7d\x4b\x0b\xc9\x16"
"\x7a\x5f\x5f\x16\xec\xfb\xb2\x31\xf5\x43\x47\x60\xca\x61\xde\xf6\x00\xae"
"\xf1\x17\x5d\xd3\x7b\xf5\x84\x81\x60\xd0\xe0\xff\x5a\xe8\x1c\x03\x80\x3c"
"\xcc\x01\x98\x27\x29\x1f\x33\x40\x80\x57\xc1\xba\xa9\xae\x1b\x50\x41\x71"
"\x9f\x38\xa0\xbd\x9d\xee\x66\xe8\x08\x4c\xd8\xe5\x98\xd4\x9c\xdd\x1d\x23"
"\x78\x34\x1c\x16\x40\xed\x0a\x91\x5f\x94\xa7\x14\xf0\xe4\x9e\x65\x30\xd1"
"\x85\x89\x29\x1c\xbc\xad\xba\x0a\x38\x1d\x5b\x72\x05\xfc\x79\x26\xf9\xc5"
"\x09\xc9\x30\xb3\x13\xa2\x46\x5d\xb1\x13\xf6\x9a\x49\xe3\xc4\x82\x03\x69"
"\x18\xc5\x3b\x62\x62\x53\xac\x8a\x4d\x2a\xb0\xc7\x00\x75\xe6\xe8\xc0\xc2"
"\xd5\x64\xb4\xe6\xc0\x18\xb2\x85\x98\x27\xef\x48\xad\xc4\x0f\xb9\xbb\x25"
"\x47\x5b\x38\xe2\x52\xaa\xf9\xb5\xc7\xfe\xc8\xce\x56\xe7\xe9\xa0\x2c\x22"
"\x6e\xcf\x26\x3e\x6b\x33\xe0\xce\x19\xfd\xb6\x40\x7d\x90\x61\xa1\x5f\x2b"
"\x6a\x33\xab\x0f\x45\xb0\x84\x3e\x32\x52\xcd\x47\xf0\xd3\x17\xbf\xe8\xd3"
"\xc9\x33\x8a\x41\x4b\x6d\x42\x56\xc2\x44\xfb\x06\x4b\xe7\x8a\x82\x7d\x86"
"\x90\x2b\x8e\x6f\xe9\xec\xa1\xbd\xce\xe9\x43\x76\xda\x02\x2d\x6d\x52\x55"
"\x1b\x85\x28\xeb\x1e\x0b\xec\x4d\x5f\x09\x59\xb6\x14\x13\xe9\x69\xf9\x0b"
"\xf2\x94\x9d\xda\xf1\xab\xaf\x2c\xf9\xe3\x58\x29\x6f\x0d\xc9\xae\xb0\xcc"
"\xa2\xf1\x86\x1e\x96\x40\xa7\xbe\x50\xa6\xf1\xcb\xe6\xba\x32\x64\x85\x9e"
"\xcd\x7e\xa8\x71\xf2\x19\x25\x96\xa7\xb7\x57\xc5\x84\x9b\x7a\xc0\xc4\x06"
"\xf9\x10\x84\xba\x66\xd8\xba\x52\xd1\x36\x9e\x94\xdb\xa6\x9f\x72\x8f\x60"
"\x5f\xf6\x33\x8f\x54\x80\x16\x7e\xdb\xf5\x42\xaa\x2b\x65\xae\xea\x64\x41"
"\xbb\x69\xda\xfa\x2c\x86\xf8\x6e\x1a\xc8\xeb\xdb\xd9\x84\xe0\xef\xbd\xda"
"\x6d\x23\xc5\x6c\xd1\xf9\xdc\x37\x4f\xd6\xfb\x32\xd5\xad\x4e\x1f\xa9\x9b"
"\xbd\x5c\x91\xfe\xce\x09\xa4\x10\x4f\xc7\xa1\x88\x97\x34\x76\x2d\xae\x97"
"\x7b\xe6\xae\x85\x64\xa9\x12\xff\x5b\xe3\xeb\xc2\xd5\x21\xa5\xa0\xbb\x72"
"\x04\x27\x47\x9c\x07\xb0\x48\xdf\x8d\xd4\x3d\x32\x88\xac\x4f\x89\x83\x2c"
"\x59\xbe\x64\xd2\x5c\x0f\x11\x0e\x34\xdd\x7b\xc3\xd8\x05\x48\x48\x7e\x92"
"\x4a\x27\x87\x34\xf2\xdb\x4f\x00\x10\x68\x50\xf0\x89\xbd\xb2\x93\x97\xa6"
"\x28\x62\x29\x9f\x63\x31\x2a\xf5\xbd\x18\xf5\x21\x25\x11\x5d\xbe\xde\x00"
"\xb5\xfd\x31\xaa\xde\x7f\xd1\x04\xec\x40\xfa\x79\x76\xe2\xb5\xed\x9e\xbb"
"\x74\xf7\x79\x3b\xbe\x41\x79\x4a\x55\xba\x6a\xbf\x5a\x62\x17\x8c\x61\x4c"
"\x11\xfd\x4c\xae\xce\xb7\xc6\xf0\xf6\x8e\x40\xbb\x01\x7d\x47\x48\x3e\xa0"
"\x0a\x7a\xf7\xd8\x57\x62\x6a\x4a\x3f\x21\x1b\x59\x03\xe9\x72\x15\xfd\xc4"
"\x57\x9d\x42\x19\x78\x5c\xf0\x3a\x93\x9c\x9c\xf8\xcd\x6f\x07\x22\xde\x1e"
"\xea\x07\x5a\x3c\x62\x32\x98\x67\x55\x06\x5d\x9b\x4c\x19\xf3\x3b\xbc\x8c"
"\x6e\x42\x92\x55\x3a\x7b\xef\x1f\xe2\xf5\x74\xdb\xa3\x33\xc1\x89\x39\x2a"
"\xe0\xe8\xc3\x1b\x39\xbb\xf9\x86\x6e\x14\x72\x9b\x04\xb8\xdc\x71\xab\x09"
"\x0e\xf0\x1a\xed\x7b\x87\x27\x7b\xa7\xf7\x88\x90\x47\x9a\x6a\x75\x6b\xeb"
"\x0e\x10\x84\xc6\xa8\x6a\xe4\x66\xde\x41\xee\x6c\xea\x1a\xbc\xb3\x4a\xb7"
"\x1b\xb8\x28\xdb\x7a\x55\x9a\x55\x8d\xb0\x64\x8c\xb5\x71\x4b\xff\x3e\x61"
"\x4e\x75\x7c\x3d\x45\xa2\x0e\x0c\xad\xc1\x05\x87\x9a\x46\xfb\xb8\x60\x62"
"\x2b\xc9\x8a\x0b\xd1\x5b\x6d\xa6\xf3\xd5\x90\x38\x46\x94\x88\x13\x67\xaa"
"\x9c\x2b\x1d\x98\x51\x38\xfc\xf2\x50\x35\xe8\xd0\x2a\x26\x55\x3e\xa3\x73"
"\xab\x49\x2c\xc1\x89\x18\xe8\x11\xf5\x3a\xae\x79\x3d\x3c\x7d\x5e\xf4\xb0"
"\x68\xd7\xb5\x7c\xfc\xf9\x78\x34\x66\xba\xa4\x18\x62\x86\x69\x49\x9d\x20"
"\x21\x20\x7e\x89\x8d\xf5\x2f\x7c\x3c\xd2\xdb\xec\xb5\xe5\xd5\xf3\x06\x71"
"\x5c\x3d\xe6\x8b\x43\x4f\x19\xf6\xbf\x8b\xde\xaf\xde\x62\x09\xee\x8b\xbe"
"\x93\xb5\x80\xf7\xcd\xbf\xf2\xde\xa3\x4a\xf4\xcc\xbd\xa7\xac\x85\x91\x58"
"\x5c\x01\x9f\x82\x26\x87\x86\x90\x52\x5e\x1d\xa8\xe6\xf2\xb8\x7d\xf6\x5a"
"\x25\x2d\xca\x6b\x4a\x10\xb4\xf2\x76\x46\x82\xd0\x4f\x12\x50\x2f\xea\xf4"
"\xe5\xe6\x6b\xb8\x67\x25\xea\x7e\xa9\x88\xb8\xcd\x92\xc1\x17\xcd\x2a\x52"
"\x57\xc9\xe0\xe9\x30\x8e\xb5\xe7\x20\x75\x2c\xeb\xf4\xb3\x3f\x1a\xad\x2a"
"\xce\x8a\xd1\xa0\xb6\xa8\x72\xb3\x00\x22\xa1\x3b\x6c\xfe\x81\xa1\xcc\x55"
"\xd0\x4d\x25\x3e\xdf\x46\x23\x5a\x84\x10\x83\xd9\x6e\xa2\x4d\x63\x1e\xa9"
"\x10\x34\x61\x35\xf6\xad\x6b\x86\xa5\xbb\x49\x3f\xf2\xf2\x20\xf6\x90\x6b"
"\x77\x85\x37\xcf\x68\x3e\x68\x18\x1e\x27\xef\xfb\x6a\x9b\x73\xab\x60\xb2"
"\xcd\xb1\x3d\x9a\x7b\x9f\x86\x3d\xa6\x08\xbc\xc5\x9d\x70\x4e\x94\xd8\x93"
"\x57\x1d\x0c\xba\xeb\xf2\xbf\x20\xe8\x6c\x73\x20\xfe\xcc\x64\xb6\xd9\xab"
"\xb9\xe7\xb5\x72\x07\x2c\x18\x83\x5e\x3a\x8d\xb2\xb0\xac\xb3\xa0\x85\xd9"
"\x84\x0e\x3c\x90\xf5\xac\xf2\xaf\x84\xa6\xc8\xbe\xea\xe7",
2048);
syscall(SYS_setsockopt, r[0], 0x29, 0x32, 0x20000240, 0x800);
*(uint8_t*)0x20000040 = 0x1c;
*(uint8_t*)0x20000041 = 0x1c;
*(uint16_t*)0x20000042 = htobe16(0x4e23);
*(uint32_t*)0x20000044 = 0;
*(uint64_t*)0x20000048 = htobe64(0);
*(uint64_t*)0x20000050 = htobe64(1);
*(uint32_t*)0x20000058 = 0;
syscall(SYS_connect, r[0], 0x20000040, 0x1c);
return 0;
}

File Metadata

Mime Type
text/x-c
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2179874
Default Alt Text
r.c (9 KB)

Event Timeline