DF-3914 / run.log
=== run 3914 === DF-3914 object-level proof mapping_table alloc : 264 entries (8448 bytes) num_rsvd_entries : 1 enclosure NumSlots (fw) : 2048 reservation loop wrote : [1, 2049) table end : 264 -> overflow of 1785 entries (57120 bytes) guard[+0..] physical_id == 0x5141524153534141 at 1785/4096 entries (stride 32) kernel equivalent : 57120-byte write of fw-controlled data past a 8448-byte kmalloc slab object RESULT: OOB WRITE PRIMITIVE PROVEN (canary smash with attacker value, 32-byte stride) E14=0