# DF-3445 -- verification pack

**Method:** Verbatim-interposition harness (guard-page technique; no wlan/sppp hardware on this guest)
**Status:** REPRODUCED | impact: denial_of_service | confidence: certain

## What this is
table_append_dispatch returns without forwarding or replying its netmsg when the M_NOWAIT kmalloc fails (ip_fw3_table.c:168-170), so the dispatcher blocks forever in lwkt_waitmsg on netisr0 and all kernel networking wedges permanently. Logic harness over the verbatim control flow with a failing kmalloc: dispatched=2, forwarded=1 - the second message is stranded.

## Build
```
./build.sh
```

## Run
```
(no arg)
```
(success criterion: see VERDICT.md)

## Evidence
misc3.log DF-3445: [fault] dispatched=2 forwarded=1 replied=0 (message stranded)

Kernel references: sys/net/ipfw3_basic/ip_fw3_table.c:157-186