### build ###
built oce_overflow
### run ###
DF-1395 oce_read_mac_addr primitive demonstration
mac->mac_addr capacity: 6 bytes (sizeof mac_addr)
FW-controlled size_of_struct = 64 (0x40)
bytes written into mac_addr region: 64
overflow past mac_addr[6]: YES -> into adjacent softc fields
adjacent softc canary corrupted: YES
first 24 bytes after mac_addr (adjacent_softc): 222222222222222222222222222222222222222222222222

OVERFLOW CONFIRMED: FW-controlled size_of_struct (64) bypassed the 6-byte mac_addr and corrupted adjacent softc fields.
On real OneConnect HW this corrupts bsmbx/bmbx_lock/wq/rq/cq/eq -> heap corruption (panic or worse).
### exit=0 ###