#!/bin/sh
# DF-3048 run (guest, root; unprivileged trigger post-mount):
set -e
kldload ext2fs
/root/vntool attach 0 /root/df3048.img
mkdir -p /mnt/e2
mount -t ext2fs -o ro /dev/vn0 /mnt/e2    # mounts: icount unvalidated
ls /mnt/e2
echo BEFORE-STAT
stat /mnt/e2/lost+found                    # dirent ino 0x40000002 -> OOB
echo AFTER-STAT-NO-PANIC                   # never reached on stock kernel