DF-4661 / env.txt
env: DragonFly guest (dfbsd-qemu vm.sh) Linux a937fe462c6a 6.12.85+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.85-1 (2026-04-30) x86_64 GNU/Linux === baseline repeat === DF-4660 REPRODUCED: pPDADCValues write walked past pcdacTable[127]: first clobbered u16 cell 0 bytes past array end, last 79 bytes past (value 0x007f) => kk ran to 168 => intra-object heap OOB WRITE past pcdacTable[PWR_TABLE_SIZE_2413=128] into Bank data (reprogrammed to the radio at ar2413.c:206-210) REPRODUCED: SIGSEGV si_addr=0x20040286a, expected wild address 0x20040286a MATCH: wild OOB read proven (ar2413.c uint32 counter underflow) === env === DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC x86_64 cc 8.3 [DragonFly] Release/2019-02-22 Copyright (C) 2018 Free Software Foundation, Inc. DragonFly 6.5-DEVELOPMENT #0: Thu Jul 2 06:02:54 UTC 2026 7 0 amd_gpu_count=0