### BASELINE (unpatched /boot/kernel/ipfw3.ko, pre-fix source) ###
module hash (orig, reverted by snapshot): ca6ccfb97c4bac6e8c8b4d6cc1dc55126c2670f8079eabb10b6008d52f77a83e
[reproduced above: 128B request -> 128 bytes, 124 bytes heap over-read: csh/-c/sftp-server/getty/ttyv0]

### PATCHED (fixed module, hash below) ###
SHA256 (/boot/kernel/ipfw3.ko) = 241f263a5d5fcffb06049eb7f0591d9c0b07837116a9d4042d5e04b64838034f
getsockopt returned 4 bytes (requested 132 payload after 4-byte x_header)
ctx->sets (first 4 bytes, the only legitimate field):
  0000: 00 00 00 00 
len <= 4: no over-read observed

getsockopt returned 4 bytes (requested 1028 payload after 4-byte x_header)
ctx->sets (first 4 bytes, the only legitimate field):
  0000: 00 00 00 00 
len <= 4: no over-read observed
