vasilito
f31522130f
Build system (5 gaps hardened): - COOKBOOK_OFFLINE defaults to true (fork-mode) - normalize_patch handles diff -ruN format - New 'repo validate-patches' command (25/25 relibc patches) - 14 patched Qt/Wayland/display recipes added to protected list - relibc archive regenerated with current patch chain Boot fixes (fixable): - Full ISO EFI partition: 16 MiB → 1 MiB (matches mini, BIOS hardcoded 2 MiB offset) - D-Bus system bus: absolute /usr/bin/dbus-daemon path (was skipped) - redbear-sessiond: absolute /usr/bin/redbear-sessiond path (was skipped) - daemon framework: silenced spurious INIT_NOTIFY warnings for oneshot_async services (P0-daemon-silence-init-notify.patch) - udev-shim: demoted INIT_NOTIFY warning to INFO (expected for oneshot_async) - relibc: comprehensive named semaphores (sem_open/close/unlink) replacing upstream todo!() stubs - greeterd: Wayland socket timeout 15s → 30s (compositor DRM wait) - greeter-ui: built and linked (header guard unification, sem_compat stubs removed) - mc: un-ignored in both configs, fixed glib/libiconv/pcre2 transitive deps - greeter config: removed stale keymapd dependency from display/greeter services - prefix toolchain: relibc headers synced, _RELIBC_STDLIB_H guard unified Unfixable (diagnosed, upstream): - i2c-hidd: abort on no-I2C-hardware (QEMU) — process::exit → relibc abort - kded6/greeter-ui: page fault 0x8 — Qt library null deref - Thread panics fd != -1 — Rust std library on Redox - DHCP timeout / eth0 MAC — QEMU user-mode networking - hwrngd/thermald — no hardware RNG/thermal in VM - live preload allocation — BIOS memory fragmentation, continues on demand
44 lines
2.1 KiB
Plaintext
44 lines
2.1 KiB
Plaintext
# Copyright 2022 Evgeny Vereshchagin
|
|
# Copyright 2022 Collabora Ltd.
|
|
# SPDX-License-Identifier: MIT
|
|
#
|
|
# This is an annotated hex-dump of a message originally generated by a
|
|
# fuzzer.
|
|
#
|
|
# To output as binary:
|
|
# sed -e 's/#.*//' test/data/invalid-messages/endian.message-raw.hex |
|
|
# xxd -p -r - test/data/invalid-messages/endian.message-raw
|
|
#
|
|
# This message is technically valid, but not practically useful: it
|
|
# contains a "handle" for the 4163371528th out-of-band file descriptor,
|
|
# which is not a practically useful thing to send, because it exceeds any
|
|
# reasonable number of file descriptors to attach to a message.
|
|
#
|
|
# The message is also in big-endian encoding (the opposite of the encoding
|
|
# used by all commonly-used CPU architectures in 2022), which until
|
|
# recently would trigger a denial-of-service vulnerability in the dbus
|
|
# message marshalling code.
|
|
|
|
# Offset % 0x10:
|
|
# 0001 0203 0405 0607 0809 0a0b 0c0d 0e0f
|
|
|
|
42 # big-endian
|
|
2d # an undefined message type
|
|
31 # flags
|
|
01 # major protocol version 1
|
|
0000 000c # message body is 0x0c = 12 bytes
|
|
97bc 9023 # serial number 0x97bc9023
|
|
0000 0008 # header is an array of 8 bytes of struct (yv)
|
|
08 # header field code 0x08 (signature)
|
|
01 # variant signature is 1 byte
|
|
6700 # "g" \0
|
|
02 # signature is 2 bytes
|
|
68 7600 # "hv" \0
|
|
# begin message body, 12 bytes
|
|
f828 0208 # out-of-band fd, index = 0xf8280208
|
|
02 # variant signature is 2 bytes
|
|
61 7600 # "av" \0
|
|
0000 0000 # array length is 0
|
|
|
|
#sha1 f99a286aaaf84d9b97549f35f71042f4a2f37e78
|