DF-1306 / run.log
BUILD_EXIT=0 -rwxr-xr-x 1 maxx maxx 9280 Jul 20 09:09 harness DF-1306 kv_parse_power_table nonClockInfoIndex OOB read harness sizeof(ATOM_PPLIB_NONCLOCK_INFO)=28 sizeof(NonClockInfoArray)=32 NonClockInfoArray @ 0x80047cfe0 (nonClockInfo[0] @ 0x80047cfe4), ucNumEntries=1 VBIOS nonClockInfoIndex = 255 (NO check vs ucNumEntries=1) access byte offset = 255 * 28 = 7140 (past the single valid entry) FAULT (signal 11): OOB read at nonClockInfo[255] off the bios buffer -> in-kernel equivalent: heap OOB read up to 7140 bytes past nonClockInfo[0] RESULT: OOB read CONFIRMED at kv_dpm.c:2670 (nonClockInfoIndex used with NO bounds check vs ucNumEntries) RUN_EXIT=0 RUN_EXIT=0