DF-2295 baseline run (unpatched kernel, stock fwdev.o):
--- /tmp/run2295.log ---
DF-2295: fw_read iso over-read; ring=4chunk/8packet/512psize, peer stream.len=1500, read=1504 (uid=1002 gid=1002)
DF-2295: stream up; DMA ring allocated by real fwdma_malloc_multiseg
DF-2295: READY -- root injects packet now (3s window)
DF-2295: read() returned 1504 (errno=0)
DF-2295: returned packet header = 05dc01a0 (len=1500 tcode=a sy/chtag=a0)
DF-2295: copied 1504 bytes; slot capacity 512 -> 992 bytes beyond the packet slot
DF-2295: user[512..] == DMA ring slot 1 (tag=0x50000001) offset 0 -- beyond slot 0
DF-2295: user[528..] == DMA ring slot 1 (tag=0x50000001) offset 16 -- beyond slot 0
DF-2295: user[544..] == DMA ring slot 1 (tag=0x50000001) offset 32 -- beyond slot 0
DF-2295: user[560..] == DMA ring slot 1 (tag=0x50000001) offset 48 -- beyond slot 0
DF-2295: attributed 248/4 bytes of the beyond-slot region to known ring-slot canary content
DF-2295: leak_sample.txt written
(host-side verifier: 62/62 windows attributed; see leak_attributed.txt)