=== kernel in guest ===
DragonFly 6.5-DEVELOPMENT #1: Tue Jul 14 10:50:44 UTC 2026

=== re-run harness BUGGY build (mirrors UNPATCHED kernel semantics) ===
bCtrlSize=32  bCtrlSize*8=256  nctrls(set bits)=1
writes IN-BOUNDS   : 1 (expected nctrls=1)
writes OUT-OF-BOUNDS: 4096  <-- UNBOUNDED HEAP OVERFLOW (primitive confirmed)
VERDICT: BUGGY — uint8_t i wraps when bCtrlSize*8 > 255;
        the loop fails to terminate and writes struct uvc_control

=== re-run harness FIXED build (mirrors PATCHED kernel semantics) ===
bCtrlSize=32  bCtrlSize*8=256  nctrls(set bits)=1
writes IN-BOUNDS   : 1 (expected nctrls=1)
writes OUT-OF-BOUNDS: 0
VERDICT: FIXED — unsigned int i holds the full range; loop
        terminates after exactly nctrls in-bounds writes.
bCtrlSize=64  bCtrlSize*8=512  nctrls(set bits)=1
writes IN-BOUNDS   : 1 (expected nctrls=1)
writes OUT-OF-BOUNDS: 0
VERDICT: FIXED — unsigned int i holds the full range; loop
        terminates after exactly nctrls in-bounds writes.