Which of the following methods is the correct way to validate the vulnerability?

A penetration tester wants to check manually if a “ghost” vulnerability exists in a system.

Which of the following methods is the correct way to validate the vulnerability?
A . Download the GHOST file to a Linux system and compile
gcc -o GHOST
test i:
./GHOST
B . Download the GHOST file to a Windows system and compile
gcc -o GHOST GHOS
C . c
test i:
./GHOST
D . Download the GHOST file to a Linux system and compile
gcc -o GHOST GHOS
E . c
test i:
./GHOST
F . Download the GHOST file to a Windows system and compile
gcc -o GHOST
test i:
./GHOST