#!/bin/sh
# DF-1081 run — exercises the OOB-proof harness (userspace replica of the exact
# kernel CRC32 + cue_mchash math) AND the original PoC against the live guest.
#
# The harness DEFINITIVELY proves the primitive (which addresses land OOB for
# real multicast MACs). The original PoC cannot trigger cue_setmulti at runtime
# because this guest has no USB host controller and no CATC USB Ethernet adapter
# (cue0) — the setsockopt(IP_ADD_MEMBERSHIP) routes to vtnet's multicast handler,
# not cue's. See VERDICT.md.
set -e
cd "$(dirname "$0")"
echo "############ USERSPACE HARNESS (proves the primitive) ############"
./cue_oob_harness
echo
echo "############ ORIGINAL PoC vs live guest ############"
echo "--- interfaces ---"; ifconfig -l
echo "--- cue0? ---"; ifconfig cue0 2>&1 | head -2
echo "--- usb ---"; usbconfig list 2>&1 | head -1
echo "--- run PoC on ifindex 1 (vtnet0) ---"
./cue_overflow 1 2>&1 || true
echo "(the '[+] wrote OOB' line above is a hardcoded printf in the PoC, NOT"
echo " evidence cue_setmulti ran — it is dead code on this USB-less guest.)"