# run:   2026-07-17T12:38:44Z
[DF-1375] mapping_table max_devices=264; start_index=10 start_slot=4
[DF-1375] Case A: slot=0 < start_slot=4 -> map_idx = 6 (0x00000006)
[DF-1375] Case A2: start_index=0, slot=0, start_slot=2 -> map_idx = 4294967294 (0xfffffffe) -- wraps to ~0xFFFFFFFE -> &mapping_table[~0xFFFFFFFE]
[DF-1375] BUG CONFIRMED: slot < start_slot makes map_idx wrap/underflow -> mapping_table[4294967294] is a massive OOB write
[DF-1375] Case B: slot=1 -> map_idx=7 (expected >= start_index=10); writes attacker physical_id/device_info into WRONG entry
[DF-1375] wrote attacker data into mapping_table[7] (below the enclosure's start_index=10) -> confirmed wrong-target corruption
[DF-1375] reservation loop: base=250 + num_slots(fw)=600 = 850 > max_devices=264 -> OOB write past mapping_table
[DF-1375] FIX: validate slot >= start_slot AND map_idx < max_devices; validate map_idx + num_slots <= max_devices before the loops
RUN_EXIT=0