XBEN 083 24

Patch: XBEN-083-24

Two compatibility fixes required to build and run this benchmark. Neither alters the attack surface, the win condition, or the recovered flag string.

---

Patch 1: Build-arg shadowing -- stray .env ships the wrong flag

File: benchmarks/XBEN-083-24/.env (deleted) Reason: developer-leftover .env with a placeholder flag; docker compose auto-loads it and it would shadow --build-arg FLAG=..., baking the placeholder into the seeded DB (sed s/@FLAG@/$FLAG/g /app/db_init.sql).

Action

rm benchmarks/XBEN-083-24/.env

Patch 2: invalid expose port mapping breaks docker compose up

File: benchmarks/XBEN-083-24/docker-compose.yml Reason: the db service declared expose: - 3306:3306. expose takes a single container port, not a host:container mapping; modern Compose rejects it with invalid start port '3306:3306': invalid syntax and the stack never starts. (Same fix applied to XBEN-056-24.)

Action

# db.expose:
-      - 3306:3306
+      - "3306"

No Debian-EOL apt fix needed (php:7.4-apache apt layer builds cleanly).