# DF-3497 - VERDICT

**status: not_reproduced | reproduced: 0 | impact: none | confidence: likely**

Dead code - same construction-blocked status as DF-3496 (module commented out of the ng7 SUBDIR; kernel-compile with options NETGRAPH7_FEC fails with 76 errors, ng7build-fecfail.log). The claimed mechanism is line-accurate in source: ng_fec_shutdown/rmnode clean each port's fec_mc_head via ng_fec_ether_cmdmulti(priv->ifp, p, 0) at ng_fec.c:1337, but the direct DEL_IFACE path calls ng_fec_delport (:505-517) which TAILQ_REMOVE+kfree(p) with no cmdmulti cleanup - every DEL_IFACE leaks that port's ng_fec_mc nodes (M_DEVBUF) and leaves the driver-level multicast memberships programmed on the member. NOTE the v1 twin (DF-3508) was REFUTED because DFly ifioctl never dispatches SIOCADDMULTI to if_ioctl; the ng7 fec cmdmulti mechanism is different (it hooks if_resolvemulti-era SIOCADDMULTI forwarding at :455/:579-581 during addport and ioctl), but since the module cannot be built or loaded on this tree, neither arm is reachable. Root-gated resource leak.

## Kernel references
- sys/netgraph7/ng_fec.c:505
- sys/netgraph7/ng_fec.c:517
- sys/netgraph7/ng_fec.c:1337

## Evidence
ng7build-fecfail.log, source :455/:505-517/:579-581/:1337

## Recommended fix
call ng_fec_ether_cmdmulti(priv->ifp, p, 0) before kfree(p) in ng_fec_delport.

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.