--- fixed replica (-DFIXED) ---
== DF-3729 ciss_notify_rescan_logical unbounded walk ==
report buffer = 128 bytes (15 LUNs) + 4096-byte redzone; ciss_max_logical_bus=2

controller list_size=0x1000 -> ndrives=131072 (buffer holds 15; init_logical would have rejected this at ciss.c:1357)

[fix] clamping ndrives 131072 -> 15

  i=  0 lun read in-buffer (raw 0x00000003) -> bus=  0 target=  3
  i=  1 lun read in-buffer (raw 0x00010007) -> bus=  1 target=  7
  i=  2 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  3 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  4 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  5 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  6 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0
  i=  7 lun read in-buffer (raw 0x00000000) -> bus=  0 target=  0

[FIXED] ndrives clamped to 15 and bus/target validated: 0 OOB accesses.
RUN_EXIT=0
OVERALL_EXIT=1