# DF-DF-1072 — reproduce

This finding was verified by **static source tracing** (see `VERDICT.md`).
Runtime reproduction on the audit's default QEMU guest is not possible
because the precondition is outside the unprivileged-guest-user threat
model (see VERDICT.md "Why it cannot be triggered from the audit guest").

## How to verify (static source check)

```sh
# from the repo root (sys/ must be present)
sh findings/poc/DF-DF-1072/verify.sh
```

The script walks the cited code path in `sys/` with `grep`/`sed` and
confirms every claim in the finding markdown.

## Files

| File          | Purpose                                                      |
|---------------|--------------------------------------------------------------|
| verify.sh     | static source-verification script                            |
| verify.log    | output of verify.sh on the audit commit (the evidence)       |
| VERDICT.md    | full narrative: mechanism, why-not-reproduced, fix rationale |
| fix.diff      | git-apply-able fix (validated with `git apply --check`)     |
| env.txt       | guest environment (uname, cc, sysctls, modules)              |
| manifest.json | machine-readable artifact catalog                            |