== DF-0732 real-kernel shrink-race uninit-heap info leak ==
Source: trigger.c run against harness_mod.ko (REAL acl_getioctl), debug.use_malloc_pattern=1.
The kernel returned ret_len bytes (as_nacls@read * 6) but the list had fewer entries at
foreach time; the tail is uninitialized kmalloc(M_INTWAIT, no M_ZERO) heap residue
shipped to userspace by copyout. Bytes shown are leaked kernel heap.

[shrink-leak #1] ret_len=49152 entries=8192 first non-MAC at entry 2, bytes: 00 00 00 00 78 cb
[shrink-leak #2] ret_len=47862 entries=7977 first non-MAC at entry 0, bytes: de ad be ae 81 c5
[shrink-leak #3] ret_len=49152 entries=8192 first non-MAC at entry 0, bytes: de ad be ae b3 fa
[shrink-leak #4] ret_len=49152 entries=8192 first non-MAC at entry 0, bytes: de ad be ae e5 47
[shrink-leak #5] ret_len=49152 entries=8192 first non-MAC at entry 0, bytes: de ad be ae e5 47
[shrink-leak #6] ret_len=49152 entries=8192 first non-MAC at entry 0, bytes: de ad be ae e5 47
[shrink-leak #7] ret_len=49152 entries=8192 first non-MAC at entry 0, bytes: de ad be af 18 25