ef89473695
vmalloc now allocates with PROT_NONE guard pages on each side, matching Linux kernel vmalloc behavior. Buffers overflow into a guard page and segfault instead of silently corrupting adjacent heap allocations.