+ ./asr_fillmsg_leak [DF-1234] asr ASR_queue_i heap info-leak demonstrator [DF-1234] Bug: ASR_fillMessage takes u_int16_t size (asr.c:486); [DF-1234] ReplySizeInBytes can be up to 0x3FFFC (~256KB). [DF-1234] bzero truncates to 16 bits; kmalloc has no M_ZERO; [DF-1234] copyout at :3575 ships uninitialized slab. [DF-1234] No /dev/asrN found: No such file or directory [DF-1234] No DPT SmartRAID on guest -> ioctl not reachable. [DF-1234] Source-level verification only (see VERDICT.md). RUN_EXIT=0