{
 "finding_id": "DF-3507",
 "verdict": "reproduced",
 "impact": "denial_of_service",
 "confidence": "certain",
 "reproduce": {
  "build": "cd /usr/src/sys/netgraph/fec && make   # fechg.c staged as ng_fec.c",
  "run": "sysctl kern.fechg.op=create x2; ADD_IFACE tap0 to fec0 and fec1; DEL_IFACE tap0 from fec1; sysctl kern.fechg.dump",
  "expected": "Reproduced on the minimally-repaired harness module (constructor UB fix only - the stock module cannot even create a node, see DF-3506 pack). Sequence (fechg dump evidence): (1) tap0+tap1 added to fec"
 },
 "kernel_refs": [
  "sys/netgraph/fec/ng_fec.c:362",
  "sys/netgraph/fec/ng_fec.c:379",
  "sys/netgraph/fec/ng_fec.c:417",
  "sys/netgraph/fec/ng_fec.c:752",
  "sys/netgraph/fec/ng_fec.c:1239"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "env.txt",
  "fec-sequence.log",
  "fechg.c",
  "fix.diff",
  "manifest.json",
  "panic.txt",
  "run.log",
  "verdict.json"
 ]
}