dfpoc: ksscanf engine PoC (stock kernel)
dfpoc: E1 %*16c%s on 8-char string: ret=1 (libc: 0, input failure)
dfpoc:   out:00 43 41 4e 41 52 59 21 00 ee ee ee 
dfpoc: E1 RESULT: walked past the NUL, copied CANARY bytes -> REPRODUCED
dfpoc: E2 in=0xfffff8004f103e40 (freed v[198]=0xfffff8004f103e40 live v[199]=0xfffff8004f103e60 delta199=32) ret=1
dfpoc:   out:00 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 
dfpoc: E2 RESULT: bytes copied from BEYOND the 32-byte allocation ('Q' from the live neighbor chunk) -> CROSS-OBJECT HEAP DISCLOSURE REPRODUCED
dfpoc: E3 in=0xfffff8004f1025c0 (freed v[198]=0xfffff8004f1025c0 live v[199]=0xfffff8004f1025a0 delta199=-32) ret=1
dfpoc:   out:00 60 26 10 4f 00 f8 ff ff 51 51 51 51 51 51 51 
dfpoc: E3 RESULT: unexpected
dfpoc: E6 %*8c%s (N == len) negative control: ret=0
dfpoc:   out:ee ee ee ee 
dfpoc: E4 '0x' %i%c%n: ret=2 v=0 ch='0' nread=2 (libc: ch='x')
dfpoc: E4 RESULT: %c re-read the consumed '0' (stale inp) -> DIVERGENCE REPRODUCED
dfpoc: E5 '5' %f%d: ret=1 a=5 b=-1 (%f consumed no argument; %d wrote through &a)
dfpoc: E5 RESULT: varargument list desynchronized -> REPRODUCED
dfpoc: done