+ date
Sat Jul 18 17:25:53 UTC 2026
+ sysctl -n kern.version
+ head -1
+ echo 'kern.version: DragonFly 6.5-DEVELOPMENT #1: Sat Jul 18 17:19:50 UTC 2026'
kern.version: DragonFly 6.5-DEVELOPMENT #1: Sat Jul 18 17:19:50 UTC 2026
+ kldload /boot/kernel/ipfw3.ko
+ echo 'core rc=0'
core rc=0
+ kldload /boot/kernel/ipfw3_basic.ko
+ echo 'basic rc=0'
basic rc=0
+ kldload /boot/kernel/ipfw3_layer2.ko
+ echo 'layer2 rc=0'
layer2 rc=0
+ kldload /boot/kernel/ipfw3_layer4.ko
+ echo 'layer4 rc=0'
layer4 rc=0
+ kldload /boot/kernel/ipfw3_nat.ko
+ echo 'nat rc=0'
nat rc=0
+ grep -i ipfw
+ kldstat
 4    2 0xffffffff82600000    41000 ipfw3.ko
 5    4 0xffffffff82641000    77000 ipfw3_basic.ko
 6    1 0xffffffff826b8000    11000 ipfw3_layer2.ko
 7    1 0xffffffff826c9000    14000 ipfw3_layer4.ko
 8    1 0xffffffff826ee000    2e000 ipfw3_nat.ko
+ cd /root/poc/DF-0477
+ echo '=== probe large buffer (see module_str) ==='
=== probe large buffer (see module_str) ===
+ ./ipfw3_get_modules_overflow 1 256
bufsize=256 iter 0: getsockopt rc=0 returned_len=23 errno=0 (Undefined error: 0)
  payload_slot=252 returned_len=23 (no overflow)
  module_str="basic,layer2,layer4,nat"
DF-0477: 1 iterations done, bufsize=256. Kernel still alive.
+ echo '=== overflow attempt: bufsize=5 (expect returned_len<=1 => NO overflow) ==='
=== overflow attempt: bufsize=5 (expect returned_len<=1 => NO overflow) ===
+ ./ipfw3_get_modules_overflow 50 5
bufsize=5 iter 0: getsockopt rc=0 returned_len=1 errno=0 (Undefined error: 0)
  payload_slot=1 returned_len=1 (no overflow)
  module_str="b"
DF-0477: 50 iterations done, bufsize=5. Kernel still alive.
+ echo 'POC_DONE rc=0'
POC_DONE rc=0
+ date
Sat Jul 18 17:25:53 UTC 2026
+ sync