BUILD_EXIT=0
-rwxr-xr-x  1 maxx  maxx  8776 Jul 17 06:46 harness
----- RUN -----
=== DF-1184: arcmsr_Read_iop_rqbuffer_data_D kmalloc(128) overflow ===
caller bounds data_len by ARCMSR_MAX_QBUFFER-1 = 4095
data_len=100   -> (ok, in-bounds)
data_len=128   -> (ok, exact)
data_len=400   -> >>> OVERFLOW  (kernel writes 272 bytes past the 128-byte slab object)
data_len=4095  -> >>> OVERFLOW  (up to 3967 bytes of heap overflow)

[+] DF-1184 CONFIRMED: firmware data_len (up to 4095) overruns the 128-byte kmalloc; up to ~3967 bytes of adjacent slab corrupted.
RUN_EXIT=0