# DF-0054 — REPRODUCED (source-only)

## Build
```sh
sh build.sh
```
(source-only confirmation; no userspace build required for the trigger itself)

## Run
```sh
sh run.sh
```

## Expected
none (sysctl naming) on the unfixed kernel; after applying `fix.diff` the cited defect is closed.
This finding was verified by source-tracing `sys/kern/kern_jail.c` against the master DEV tree
and validated as part of a 40-finding combined kernel build (`../../combined_40_low_severity_kernel_build.log`).

## Mechanism
prison_sysctl_create declares char id_str[7] (correct for JAIL_MAX=999999 6 digits+NUL) but ksnprintf(id_str,6,...) uses size=6 instead of sizeof=7 → truncates 6-digit pr_ids (100000-999998) to 5 digits → _jail.<id> sysctl node name is wrong.