As I understand it, the channel files contained a bunch of named pipe address locations that pointed the kernel driver to places to look for suspicious activity. Unfortunately, the last set of addresses was all zeroes. Surely, any sort of validator should have noticed and rejected that one.