BUILD_EXIT=0
=== DF-1732 vinum_scandisk config-line overflow harness ===
config_line buffer = 2048 bytes (MAXCONFIGLINE*2)
attacker disk line length = up to 131072 bytes (MAXCONFIG*2)

Vulnerable vinumio.c:799-800 copies 131072 bytes into a 2048-byte buffer
Overflow amount: 129024 bytes past buffer end (attacker-controlled)

VERDICT: BUG CONFIRMED. Inner copy loop has no upper bound on
        eptr; a single non-newline-terminated line in the
        vinum config area overflows the 2 KB config_line by
        ~129 KB. Root-only trigger (vinum geom), but full
        heap corruption with attacker-shaped content.
RUN_EXIT=0