# DF-0608 — PoC: (none — no impact on supported platforms)

No PoC. DF-0608 documents a `sizeof(ips)` vs `sizeof(*ips)` typo that has
no memory-safety impact on any platform DragonFlyBSD currently targets
(all supported platforms are 64-bit, where `sizeof(pointer) ==
sizeof(struct ng_cisco_ipaddr) == 8`). It is a latent `CWE-131` that would
turn into a 4-byte heap overflow if 32-bit support returned or the struct
gained a field.

See `findings/DF-0608-ng7-iface-cisco-get-ipaddr-sizeof-typo.md` for the
analysis and the one-line fix.