DF-1282 / run.log
[DF-1282] mapping_table allocated for max_devices=264 entries (sizeof(entry)=32) [DF-1282] attacker/firmware DeviceIndex=266, num_slots=4 [DF-1282] BUG CONFIRMED: dev_idx=266 >= max_devices=264 -> write at mapping_table[266] is 64 bytes PAST the allocation (into the adjacent slab object) [DF-1282] guard/slab region corrupted: YES -> next heap object(s) overwritten (4 of 64 entries touched) [DF-1282] FIX: with bounds check, write SKIPPED (dev_idx=266 >= max_devices=264) -> no corruption RUN_EXIT=0