Excellent sleuthing there!

You wrote: “it is actually really surprising to us that this bug has existed for years without having been detected.” I was around in the olden of days when Sun Microsystems ran NFS over UDP with checksumming turned off, and so I’m entirely unsurprised….