DF-2260 / run_baseline_oob.log
sizeof(struct dev_match_pattern)=56 offsetof(pattern.periph_pattern.flags)=36
PRIME[0]: pattern_buf_len=8176 num_patterns=2 (8KB of repeated pass-patterns)
ioctl=0 errno=0 status=0x1 num_matches=1 pos.type=0
PRIME[1]: pattern_buf_len=8176 num_patterns=2 (8KB of repeated pass-patterns)
ioctl=0 errno=0 status=0x1 num_matches=1 pos.type=0
OOB: pattern_buf_len=56 num_patterns=64 (in-bounds patterns[0]=zzzz)
ioctl=0 errno=0 status=0x1 num_matches=1 pos.type=0
match[0] periph=pass0 <== produced by an OUT-OF-BOUNDS stale pattern slot
match[6] periph=0 <== produced by an OUT-OF-BOUNDS stale pattern slot
match[14] periph=pass0 <== produced by an OUT-OF-BOUNDS stale pattern slot
match[20] periph=0 <== produced by an OUT-OF-BOUNDS stale pattern slot
match[28] periph=pass0 <== produced by an OUT-OF-BOUNDS stale pattern slot
CONTROL: pattern_buf_len=56 num_patterns=1
ioctl=0 errno=0 status=0x1 num_matches=0 pos.type=0
VERDICT: OOB call matched pass* while legal control matched nothing -> kernel consumed pattern bytes beyond pattern_buf_len (DF-2260)