DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Mon Oct 19 22:08:10 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_HCIPOC  x86_64
ed5ab16ea4b248af10ad4cbdbf420a02acf37d53509f9a35d739296111dfafde
14d26fb7c9610763fef6ea78383119a882217a1f04336a4d79618fc1af9ae2a4
    root@dfbsd:/usr/obj/usr/src/sys/X86_64_HCIPOC
HCIPOC: DF-2539 harness loaded (verbatim interposition)
HCIPOC: ng_hci_evnt.c sha256=14d26fb7c9610763fef6ea78383119a882217a1f04336a4d79618fc1af9ae2a4
HCIPOC: num_compl_pkts verbatim sha256=ed5ab16ea4b248af10ad4cbdbf420a02acf37d53509f9a35d739296111dfafde (ng_hci_evnt.c lines 876-932 (57 lines))
HCIPOC: real-control: REAL ng_hci_process_event, well-formed Number Of Completed Packets event
num_compl_pkts: hcipoc0 - invalid connection handle=2457
HCIPOC: real-control: rc=0 con.pending=3 buffer.acl_free=3 (expect control: rc=0 pending=3 acl_free=3)
HCIPOC: real-control: PASS
HCIPOC: real-malformed: REAL ng_hci_process_event, num_con_handles=255 with 1 pair -> vulnerable loop in ng_hci_evnt.c num_compl_pkts
HCIPOC: real-malformed: entering ng_hci_process_event...
num_compl_pkts: hcipoc0 - invalid Number Of Completed Packets event, num_con_handles=255, payload=4 bytes
HCIPOC: real-malformed: RETURNED WITHOUT PANIC -- FAIL (con.pending=5 acl_free=1)