# DF-2899 PoC evidence pack

## What
fp_mmap maps VCHR vnodes without the revoked-device (v_rdev == NULL) guard its sibling kern_mmap has.

## Build
```
(none)
```

## Run
```
(none)
```

## Expected
static confirmation (no run): kern_mmap guard present at vm_mmap.c:285-288, absent in fp_mmap

Guest: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:04 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
All logs are full untrimmed captures unless noted. fix.diff is the
git-apply-able verified fix (authored after verification; never applied
to the audit tree).