KLD=0
[*] ioc_svlen=4, sa_len=255 (OOB read of 251 bytes)
[*] SMBIOC_OPENSESSION ...
[*] ioctl returned rc=-1 errno=22 (Invalid argument)
[+] EINVAL on bad sa_len -> sa_len IS validated (FIXED kernel)
EXIT=0