DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
--- run.sh ---
=== DF-0788 harness: resident attribute data-offset OOB read ===

--- clean case (valid a_dataoff): should succeed (rc=0) ---
mode=clean        apply_fix=0   recsz=1024 attr_off=56 a_dataoff=0x0018 a_datalen=32   -> rc=0  memcpy within bounds (clean)
  copied 32 bytes: first 8 = 44 44 44 44 44 44 44 44 (expected 44 44 ... = 'D' sentinel)
harness_exit=0

--- oob_dataoff case (lying a_dataoff, BUGGY): should SIGSEGV (rc=2) ---
mode=oob_dataoff  apply_fix=0   recsz=1024 attr_off=56 a_dataoff=0x03c8 a_datalen=64   -> rc=2  SIGSEGV -> OOB READ past record into guard page (= adjacent slab heap in kernel): LEAK CONFIRMED
harness_exit=2

--- oob_dataoff WITH apply_fix: should reject EINVAL (rc=0) ---
mode=oob_dataoff  apply_fix=1   recsz=1024 attr_off=56 a_dataoff=0x03c8 a_datalen=64   -> rc=1  FIX REJECTED malformed attribute (EINVAL) - OOB prevented
harness_exit=0
RUN_EXIT=0