# DF-3261 -- verification pack

Finding: ipfw rule set byte unvalidated; 1 << set UB and broken set administration

Status: **reproduced** / impact **denial_of_service** / confidence certain

## What was run
guest: cc -O -o addset addset.c (raw IP_FW_ADD with exact ipfw_ioc_rule layout)

## How to reproduce
```
guest: kldload ipfw + staged allow rule; addset 40 1000; addset 200 1001; addset 8 1002; ping; ipfw set disable 8; ping; ipfw show
```

## Expected
sets 40/200 install; set disable 8 freezes all three rules counters; set move 40 rejected

See VERDICT.md for the full narrative and verdict.json for the persisted
machine verdict. Artifacts: addset.c, run.log.