#!/bin/sh
# DF-0593 build.sh
#
# This finding is a LATENT UAF with NO userspace trigger path on the current
# kernel (all pf ioctl callers of altq_remove() gate per-class destroy on
# qname[0]==0, and DIOCCHANGEALTQ returns ENODEV unconditionally -- see
# VERDICT.md). There is therefore no PoC binary to build: the verification
# was a source-level reachability trace (sys/net/altq/altq_fairq.c:488-529,
# sys/net/altq/altq_subr.c:566-571, sys/net/pf/pf_ioctl.c:580-674,2092-2095)
# plus a build-and-boot validation of fix.diff.
#
# This script is a no-op that documents that fact:
echo "DF-0593: latent UAF, no PoC to build. See VERDICT.md for the source-level trace."
echo "Fix validation: see fix.diff, fix_build.log (single-fix kernel build), fix_run.log (booted #1 kernel)."
exit 0