# DF-3206 -- verification pack

Finding: cd9660_lookup evaluates shared dp->i_ino after vn_unlock in the DOTDOT path

Status: **not_reproduced** / impact **denial_of_service** / confidence likely

## What was run
host: python3 craft_dotdot_iso.py out.iso; guest: cc -O -o racer racer.c -lpthread

## How to reproduce
```
guest: mount_cd9660 -o ro /dev/vn2 /mnt && su -m nobody -c /tmp/racer /mnt 90
```

## Expected
expected occasional HIT lines (ino != root); observed zero in 32.2M iterations

See VERDICT.md for the full narrative and verdict.json for the persisted
machine verdict. Artifacts: craft_dotdot_iso.py, racer.c, run.log.