[attack bcnt=255] rc=0(SMB_ENOERR=0) count_in=32 count_out=255
[attack bcnt=255] io: reads=1041 writes=525 ec_sc_polls=783 | smb register fetches=258 OOB(>0x23 data-file end)=221 max logical reg=0xff
[attack bcnt=255] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = de df 00 00
[attack bcnt=255] PROOF: logical SMB registers 0x24..0xff were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[attack bcnt=255] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0xff; buf[33] (reg 0x25=ALRM_A) 0x7f; buf[36] (reg 0x28) 0x72
[attack bcnt=255] CONTRACT BREAK: *count reports 255 but caller buffer holds only 32 initialized byte(s) -- caller-side read of buf[count_in..count_out-1] reads the caller's uninitialized buffer
[edge bcnt=33] rc=0(SMB_ENOERR=0) count_in=32 count_out=33
[edge bcnt=33] io: reads=153 writes=81 ec_sc_polls=117 | smb register fetches=36 OOB(>0x23 data-file end)=2 max logical reg=0x24
[edge bcnt=33] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = de df 00 00
[edge bcnt=33] PROOF: logical SMB registers 0x24..0x24 were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[edge bcnt=33] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0x21; buf[33] (reg 0x25=ALRM_A) 0x00; buf[36] (reg 0x28) 0x00
[edge bcnt=33] CONTRACT BREAK: *count reports 33 but caller buffer holds only 32 initialized byte(s) -- caller-side read of buf[count_in..count_out-1] reads the caller's uninitialized buffer
[control bcnt=16] rc=0(SMB_ENOERR=0) count_in=32 count_out=16
[control bcnt=16] io: reads=85 writes=47 ec_sc_polls=66 | smb register fetches=19 OOB(>0x23 data-file end)=1 max logical reg=0x24
[control bcnt=16] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = 00 00 00 00
[control bcnt=16] PROOF: logical SMB registers 0x24..0x24 were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[control bcnt=16] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0x10; buf[33] (reg 0x25=ALRM_A) 0x00; buf[36] (reg 0x28) 0x00