# DF-0266 PoC — uninitialized inflate window heap leak

## Build
```
cc -o inflate_leak inflate_leak.c
```

## Run
```
./inflate_leak
```

## Expected
Code-path confirmation harness documenting: z_alloc lacks M_ZERO, inflate window
not zeroed on reset, COPY case has no distance validation. A live trigger requires
netgraph7 PPP deflate (ng_deflate) and a malicious peer sending crafted
compressed frames.