=== PATCHED: single-fix kernel #1 (fix.diff: bpf_filter.c MEM bounds + check_bpf bpf_validate gate) ===
# uname: DragonFly dfbsd 6.5-DEVELOPMENT #1: Sat Sep 12 21:38:29 UTC 2026 (nativekernel build, fix_build.log)
# sysctl net.filters_default_to_accept=1 ; kldload ipfw3 ipfw3_basic ipfw3_layer4 ; cc -O -o poc3444 poc3444.c

# ./poc3444 empty
[+] rule with O_LAYER4_BPF program installed (NO validation)
[*] sendto rc=1 errno=0
[!] still alive: BPF_ST did not fire (rule not reached?)
EMPTY-RC=5                      # NO PANIC (baseline: bpf_filter+0x50 walk)

# ./poc3444 store 0xcafebabe 0x08000000
[*] sendto rc=1 errno=0
STORE-RC=5                      # NO PANIC (baseline: bpf_filter+0x4d3 OOB store)

# ./poc3444 riptake 0x42424343 0x00004141
[*] sendto rc=1 errno=0
RIPTAKE-RC=5                    # NO PANIC (baseline: RIP=0x414142424343)

# ping -c 1 -t 2 10.0.2.2
round-trip min/avg/max/stddev = 0.218/0.218/0.218/0.000 ms   # networking healthy, ssh alive