## FIXED kernel: kern.version
DragonFly 6.5-DEVELOPMENT #1: Sun Jul 12 11:10:52 UTC 2026
SHA256 (/boot/kernel/kernel) = 336768d6d4fda955ff1d83a0f5510bfcec6408ba53931461170511e87214e79e

## TEST: huge write EFAULT (4GiB+pagesz) on FIXED kernel
BEFORE: -rwsrwxr-x
write returned -1 errno=14 (Bad address)
target mode=775 ISUID=cleared (safe)
AFTER:  -rwxrwxr-x

## TEST: small write EFAULT (100 bytes) on FIXED kernel
BEFORE: -rwsrwxr-x
write(3, start, 100) = -1 errno=14 (Bad address)
mode=775 ISUID=cleared
AFTER:  -rwxrwxr-x

## TEST: full exploit chain on FIXED kernel (should FAIL)
[*] payload: 179 bytes (ELF hdr + phdr + shellcode)
[*] target mode=775 ISUID=clear before write
[*] write returned -1 errno=14 (Bad address) -- expected EFAULT
[safe] target mode=775 ISUID=cleared after write
[!] ISUID was cleared -- bug NOT reproduced (is this a fixed kernel?)
--- exec attempt ---
uid=1001(maxx) gid=1001(maxx) groups=1001(maxx)