# DF-3069 verification

Kernel: DragonFly dfbsd 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64

Not attempted on the guest: demonstrating the memory-exhaustion requires forging on the order of a million CRC-valid, seqno-monotonic REDO_TERM records across the undo FIFO of a crafted image (~1GB of undo for a visible mount-time stall against 4GB RAM) - beyond the crafted-image rig budget for a Low/DoS return. Code-verified: one kmalloc per unique TERM key (hammer_recover.c:1177) plus one per occurrence (:1202-1205), all freed only at stage2 end (:731-738); nothing enforces the documented must-fit-in-memory constraint (:611).

## Kernel references
- sys/vfs/hammer/hammer_recover.c:611
- sys/vfs/hammer/hammer_recover.c:1177
- sys/vfs/hammer/hammer_recover.c:1202

## Fix
See fix.diff.

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.