== DF-0672 fix-validation: smbfs module build (compile check) ==

Build command:
  cd /usr/src/sys/vfs/smbfs && make obj && make

DF-0672 fix.diff applied to /usr/src/sys/netproto/smb/smb_trantcp.c
before building:
  Hunk #1 succeeded at 255.
  done
  APPLIED

Module build (last lines):
  cc -O2 -pipe ... -c .../netproto/smb/smb_trantcp.c
  ...
  cc -Wl,--build-id=sha1 ... -o smbfs.ko md4c.o smb_conn.o smb_dev.o smb_trantcp.o ...
  === SMBFS_BUILD_DONE rc=0 ===

Result:
  /usr/obj/usr/src/sys/vfs/smbfs/smbfs.ko (168824 bytes)
  Build rc=0 — fix compiles cleanly with -Werror.

Fix-validation verdict: not_testable (live). The live trigger of
DF-0672 requires a malicious NBSSN server sending NB_SSN_RTGRESP plus
a user-initiated SMB session (mount_smbfs or SMBIOC_LOOKUP) — beyond
the scope of a minimal PoC. We confirmed the fix.diff APPLIES to the
in-guest source and COMPILES (rc=0, -Werror clean); the patched code
unambiguously initializes sin_len, sin_family, and zeroes sin before
the md_get_mem/md_get_uint16 calls, so the cited defect is closed.