{
 "finding_id": "DF-2907",
 "verdict": "reproduced",
 "impact": "panic",
 "reproduce": {
  "build": "make (KMOD dfv_boom with KERNBUILDDIR)",
  "run": "kldload smbfs; kldload dfv_boom.ko; sysctl -w dfvboom.m2907=1",
  "expected": "safe form: md_done leaves md_cur/md_pos dangling + stale m_len read; panic form: panic: m_copym: length > size of mbuf chain"
 },
 "kernel_refs": [
  "sys/kern/libmchain/subr_mchain.c:518",
  "sys/kern/libmchain/subr_mchain.c:323",
  "sys/kern/uipc_mbuf.c:1547"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "build.sh",
  "dfv_boom.c",
  "env.txt",
  "fix.diff",
  "fix_run.log",
  "manifest.json",
  "run.log",
  "run.sh",
  "verdict.json"
 ],
 "fix_status": "fixed"
}