# DF-3266 -- verification pack

Finding: pf_get_sport downward loop underflows when the pool range includes port 0

Status: **not_reproduced** / impact **denial_of_service** / confidence likely

## What was run
guest: cc -O -o fillsyn fillsyn.c (raw SYN injector with valid checksums)

## How to reproduce
```
guest: pfctl -f conf (port 0:65535 nat on lo0), fillsyn 127.0.0.1 9 fill, then trigger
```

## Expected
rule accepted; full saturation (and thus the unterminating loop) not reached on this rig

See VERDICT.md for the full narrative and verdict.json for the persisted
machine verdict. Artifacts: fillsyn.c, run.log.