{
  "finding": "DF-2671",
  "title": "extattr syscalls copyin() 255-byte attrname without NUL-termination guarantee (latent stack OOB read; no in-tree VOP consumer)",
  "verdict": "untested",
  "impact": "none",
  "reproduce": { "build": "", "run": "", "expected": "n/a — latent hardening; all in-tree vop_setextattr/getextattr route to vop_eopnotsupp" },
  "kernel_refs": ["sys/kern/vfs_syscalls.c:5224", "sys/kern/vfs_syscalls.c:5274", "sys/kern/vfs_syscalls.c:5322", "sys/sys/extattr.h:62"],
  "artifacts": ["README.md", "verdict.json", "manifest.json"]
}