DF-1091 / verify.log
PASS amdsmb_bread reads SMB_BCNT into len, no clamp before loop PASS amdsmb_bread loop bound is slave len PASS SMB_DATA + i with i up to 255 reads past 32-byte register file PASS amdsmb_bread writes *count = len (unclamped) PASS SMB_DATA == 0x04, 32 registers (control case) PASS amdsmb_bwrite validates count <= 32 (control case) PASS smb.c SMB_BREAD passes uninitialized bcount then copyout up to bcount control: ichsmb fix may or may not be present PASS ichsmb_bread clamps block_count in ISR (cross-driver control) PASS amdsmb is built into GENERIC (smbus module) PASS=9 FAIL=0