=== PATCHED ipfw3 module: uflow (short payload) must return EINVAL ===
[*] raw socket fd=3
[*] setsockopt(IPPROTO_IP, IP_FW_X=49, buf, 2) -- expect kernel panic from size_t-underflow bcopy
[!] setsockopt returned rc=-1 errno=22 (Invalid argument)
[+] kernel correctly rejected short payload (EINVAL) -> bug absent / fixed
uflow_rc=0
=== regression: valid 4-byte IP_FW_X payload must NOT be EINVAL (gets past the new check) ===
regress: 4-byte IP_FW_X rc=0 errno=0 (Undefined error: 0)
REGRESSION_OK: >=4-byte payload not rejected by new check
regress_rc=0
=== guest still alive ===
 5:18PM  up 2 mins, 0 users, load averages: 0.05, 0.03, 0.01