#!/bin/sh
# DF-1076 run script. Runs the harness twice and shows the contrast:
#   ./harness          -> models the UNPATCHED kernel (OOB write expected)
#   ./harness_clamped  -> models the PATCHED kernel   (no OOB)
# Both run as the unprivileged user; no privileged setup needed because
# the harness reproduces the ISR logic in userspace — the live kernel bug
# path requires ichsmb PCI hardware that this guest does not have.
set -e
cd "$(dirname "$0")"
echo "############ UNPATCHED kernel model (no clamp) ############"
./harness
echo
echo "############ PATCHED kernel model (clamp at ichsmb.c:586) ############"
./harness_clamped