DF-1250 / run.log
RUN_START bios allocation = 512 bytes edid_info = 0x40, raw = bios+64 raw[0x7e] = 0xff computed size (radeon_combios.c:374) = 32768 bytes memcpy reads raw[0 .. 32768) = bios[64 .. 32832) over-read past BIOS allocation: 32320 bytes of adjacent kernel heap PRIMITIVE CONFIRMED: memcpy(edid, raw, 32768) reads 32320 bytes past a 512-byte BIOS slab. drm_edid_is_valid is checked only AFTER (radeon_combios.c:381) -> leak is unconditional. Bug is REAL. EXIT=0