# DF-0462 - Verification Verdict

**Verdict:** REPRODUCED (source-only confirmation)

**Bug class:** overflow

**Impact:** none

**Source file:** `sys/netgraph7/l2tp/ng_l2tp.c`

## Mechanism

CONFIRMED: bzero(&hpriv->conf, sizeof(struct ng_l2tp_session_stats)=32). Copy/paste: intent was bzero(&hpriv->stats,...). conf is ~8 bytes, writes 32 -> overflows 24 bytes. Fix: bzero(&hpriv->stats,...).

## Fix

See `fix.diff` for the git-apply-able patch.

## Build validation

Combined kernel build with all 70 Low-severity fixes: **rc=0, -Werror**.
All fixes compile cleanly in `X86_64_GENERIC` kernel configuration.

**Guest:** DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64