### build ###
built wi_overflow
### run ###
DF-1400 wi_write_wep (LUCENT) primitive demonstration
wi_key.wi_keydat capacity: 14 bytes
keylen (wk_keylen, up to IEEE80211_KEYBUF_SIZE): 16
slot 0: wrote 16 bytes into 14-byte wi_keydat -> 2 byte(s) past end
slot 1: wrote 16 bytes into 14-byte wi_keydat -> 2 byte(s) past end
slot 2: wrote 16 bytes into 14-byte wi_keydat -> 2 byte(s) past end
slot 3: wrote 16 bytes into 14-byte wi_keydat -> 2 byte(s) past end [runs OFF the wkey[4] array into the frame]
frame region after wkey[4] corrupted by last slot: YES

OVERFLOW CONFIRMED: keylen=16 > wi_keydat[14] overflows by 2 byte(s) per slot; last slot overruns wkey[4] into the stack frame.
On real Prism/Lucent WiFi HW (state transition AUTH/RUN) this is a stack overflow in wi_write_wep -> corruption/panic.
### exit=0 ###