# DF-3262 -- verification pack

Finding: O_VIA/O_RECV/O_XMIT name[] not required NUL-terminated; kfnmatch walks past rule

Status: **not_reproduced** / impact **leak** / confidence likely

## What was run
guest: addset via 2000 <16-byte-name> (same tool as DF-3261)

## How to reproduce
```
guest: addset via 2000 vtnet0[AAAAAAAAA; ipfw -S list; traffic; ipfw show 2000
```

## Expected
rule installs with no NUL in name[] (validation gap); never matches the control pattern

See VERDICT.md for the full narrative and verdict.json for the persisted
machine verdict. Artifacts: run.log.