{
 "finding_id": "DF-4055",
 "verdict": "reproduced",
 "impact": "leak",
 "reproduce": {
  "build": "sh /root/dfet/build.sh (guest, root; bsd.kmod.mk -Werror)",
  "run": "sh /root/dfet/run.sh 1",
  "expected": "3x 'dfet: if_input: ... m_len=59996 ... ext_size=2048' + OOB heap dumps + 'S1 BUG CONFIRMED (DF-4055)' marker; first-run free-path variant: panic 'overflowed mbuf' (panic.txt). Guest survives leak-mode run."
 },
 "kernel_refs": [
  "sys/dev/netif/et/if_et.c:1863",
  "sys/dev/netif/et/if_et.c:1892",
  "sys/dev/netif/et/if_et.c:1896",
  "sys/dev/netif/et/if_et.c:1902",
  "sys/dev/netif/et/if_etvar.h:98",
  "sys/kern/uipc_mbuf.c:1317"
 ],
 "artifacts": [
  "dfet_poc.c",
  "Makefile",
  "build.sh",
  "run.sh",
  "run.log",
  "dmesg_s1.txt",
  "leak_sample.txt",
  "panic.txt",
  "fix.diff",
  "fix_build.log",
  "fix_run_s1.log",
  "fix_run_s1_dmesg.txt",
  "VERDICT.md",
  "env.txt",
  "verdict.json",
  "manifest.json"
 ]
}