#!/bin/sh
# DF-1327 — run the mpr_user_pass_thru info-leak PoC as an unprivileged
# user.  On a host WITH an LSI SAS3+ HBA present (operator-group user),
# this issues MPTIOCTL_PASS_THRU with ReplySize=1MiB and dumps the leaked
# reply-DMA-pool bytes.  On the QEMU audit guest (no SAS HBA) it fails at
# open("/dev/mpr0") with ENOENT — see VERDICT.md.
set -e
cd "$(dirname "$0")"
echo "+ ./poc"
./poc
echo "RUN_EXIT=$?"