{
 "finding_id": "DF-3274",
 "verdict": "reproduced",
 "impact": "none",
 "confidence": "certain",
 "reproduce": {
  "build": "./build.sh",
  "run": "df3274 uaf",
  "expected": "control (read-before-free order) rc=0; stock order (free-then-read) faults the guard page rc=139; FIXED build clean (fixruns.log DF-3274 FIXED-OK)"
 },
 "kernel_refs": [
  "sys/net/sppp/if_spppsubr.c:1372-1380",
  "sys/net/sppp/if_spppsubr.c:1429-1438",
  "sys/net/sppp/if_spppsubr.c:4672-4681"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "allruns.log",
  "build.sh",
  "df3274.c",
  "fix.diff",
  "fixbuild.sh",
  "fixrun.sh",
  "fixruns.log",
  "guard.h",
  "manifest.json",
  "run.sh",
  "verdict.json"
 ],
 "guest_uname": "DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026  root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64",
 "generated": "2026-10-25T17:56:24.670317"
}