# DF-3582/3583/3584 — FULL untrimmed compiler history (guest cc 8.3, DragonFly 6.5-DEVELOPMENT)

## First attempt (3584 missing <stddef.h> — captured verbatim):
BUILD3583=0
sizeof(isp_rio1_t) = 64 (header 4 + req_handles[15])
rqs_seqno is 8 bits => card may claim up to 255 handles
max OOB stack read = (255-15)*4 = 960 bytes past qe[64]

FAULT (SIGSEGV/SEGV) at 0x80047d000 => 0 bytes past the end of qe[64] (loop reached i == 16, array holds 15)
kernel impact: read of up to 960 bytes of kernel stack,
     values consumed as completion handles (isp_fastpost_complete)
RUN3583=0
BUILD3584=0
sizeof(fcparam) = 21576; 2-channel allocation = 43152 bytes
offsetof(fcparam, isp_dev_map) = 20536 (entries: 512)

XPT_RESET_DEV on chan 1, target 0 => tgt = 0x10000
read address = base + 20536 + 2*65536 = base + 151608
=> 108456 bytes past the end of the 43152-byte allocation

FAULT (SIGSEGV/SEGV) at 0x8004c5038 => 108456 bytes past allocation end
kernel impact: wild kernel read during BDR handling (panic if unmapped / garbage index otherwise)
RUN3584=0

## Final successful builds (clean, no diagnostics):
== BUILD (full untrimmed) ==
cc3582=0
cc3583=0
cc3584=0

== RUN df3582 ==
