The current PoC sets the number_entries to 0xffff when q = (directory+(12*entry)+2 and entry is 0xffff * 12 then q is outside the memory space
The current PoC sets the number_entries to 0xffff (12*entry) +2 and entry is 0xffff * 12 then q is outside the memory space
when q = (directory+