DF-0799 TOCTOU race harness (enhanced)
File: /mnt/testfile
Read: offset=32768 size=32768 (biosize=8192)
Iterations: 200000
---
[TOCTOU #1 iter=922] pread offset=32768 returned 32768 bytes, but fstat says file size = 0
  hex[0..63]: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  [OOB READ] 24576 bytes past biosize buffer are 0x00 (kernel memory, not file data 0xaa)
[TOCTOU #2 iter=3712] pread offset=32768 returned 32768 bytes, but fstat says file size = 0
  hex[0..63]: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  [OOB READ] 24576 bytes past biosize buffer are 0x00 (kernel memory, not file data 0xaa)
[TOCTOU #3 iter=4456] pread offset=32768 returned 32768 bytes, but fstat says file size = 0
  hex[0..63]: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  [OOB READ] 24576 bytes past biosize buffer are 0x00 (kernel memory, not file data 0xaa)
[TOCTOU #4 iter=5515] pread offset=32768 returned 32768 bytes, but fstat says file size = 0
  hex[0..63]: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  [OOB READ] 24576 bytes past biosize buffer are 0x00 (kernel memory, not file data 0xaa)
[TOCTOU #5 iter=5895] pread offset=32768 returned 32768 bytes, but fstat says file size = 0
  hex[0..63]: 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
  [OOB READ] 24576 bytes past biosize buffer are 0x00 (kernel memory, not file data 0xaa)
---
TOCTOU events (pread>0 when file size==0): 5
OOB leak confirmations: 5
VERDICT: TOCTOU CONFIRMED — read returned data from a 0-byte file,
         reading past the biosize buffer into adjacent kernel memory.
FIXED_EXIT=0