=== UNPATCHED ===
=== DF-1091 amdsmb_bread OOB MMIO harness (UNPATCHED) ===
caller *count=8, slave SMB_BCNT=255
rc=0, returned *count=255 (was 8)
MMIO reads past SMB_DATA[0..31]: 223
RETURNED COUNT > 32: caller (smb.c) will copyout up to 255 bytes
  from a buf only 32 bytes were written into -> uninitialized stack leak
BUG: 223 OOB MMIO reads of adjacent EC registers (SMB_BCNT/SMB_ALRM_*/beyond)
=== PATCHED ===
=== DF-1091 amdsmb_bread OOB MMIO harness (PATCHED) ===
caller *count=8, slave SMB_BCNT=255
rc=0, returned *count=32 (was 8)
MMIO reads past SMB_DATA[0..31]: 0
OK: no OOB; returned count clamped to 32