[*] project cache: /data/pruva/project-cache/ab38e70b-91c6-4571-9872-2e6f134461d6
[*] vuln bin:  /data/pruva/project-cache/ab38e70b-91c6-4571-9872-2e6f134461d6/demo_server_vuln
[*] fixed bin: /data/pruva/project-cache/ab38e70b-91c6-4571-9872-2e6f134461d6/demo_server_fixed
[*] client:    /data/pruva/project-cache/ab38e70b-91c6-4571-9872-2e6f134461d6/xring-client/xring-client
[*] vuln tree line:
129:                size_t ori_sz1 = mcap - soffset_ori;    /* size of first block in original buffer */
[*] fixed tree line:
129:                size_t ori_sz1 = rmem->capacity - soffset_ori;    /* size of first block in original buffer */
[vuln#1] server pid=22169 listening on udp/8443
[vuln#1] RESULT: server CRASHED exit=134
[vuln#2] server pid=22202 listening on udp/8443
[vuln#2] RESULT: server CRASHED exit=134
[fixed#1] server pid=22229 listening on udp/8443
[fixed#1] RESULT: server ALIVE (no crash)
[fixed#2] server pid=22253 listening on udp/8443
[fixed#2] RESULT: server ALIVE (no crash)
bundle/repro/reproduction_steps.sh: line 287: 22229 Killed                     LD_LIBRARY_PATH="$BABASSL_LIB" "$bin" -l d > server.stdout 2> server.stderr  (wd: /data/pruva/runs/4a2e1a27-ea50-4bbb-86bb-a0313feb6bff/bundle/artifacts/fixed_attempt1)
bundle/repro/reproduction_steps.sh: line 287: 22253 Killed                     LD_LIBRARY_PATH="$BABASSL_LIB" "$bin" -l d > server.stdout 2> server.stderr  (wd: /data/pruva/runs/4a2e1a27-ea50-4bbb-86bb-a0313feb6bff/bundle/artifacts/fixed_attempt2)
==========================================================
[*] vulnerable crashes: 2 / 2
[*] fixed alive (no crash): 2 / 2
[*] vuln exit codes: exit=134 exit=134
==========================================================
[*] glibc _FORTIFY_SOURCE abort observed: 2 / 2
[*] wrote /data/pruva/runs/4a2e1a27-ea50-4bbb-86bb-a0313feb6bff/bundle/repro/runtime_manifest.json
[*] confirmed=true
[+] CVE-2026-XRING reproduced: remote unauthenticated crash confirmed, negative control passes.