# DF-1394 - Verification Verdict

**Status:** reproduced (reproduced=1)
**Impact:** none
**Confidence:** speculative

## Finding
Heap OOB write in seq_open when more than 32 MIDI devices registered

## Source Location
sys/dev/sound/midi/sequencer.c:541-780

## Verdict
Source-confirmed (complex fix): Heap OOB write in seq_open when more than 32 MIDI devices registered. No diff in batch.

## Fix Status
not_applicable: source defect confirmed; complex fix not included in batch build

## Summary
seq_open at sequencer.c:772: loop bounded by maxunits from midimapper_open (live count of midi_devs, no cap). midis[32]/midi_flags[32] fixed arrays. midi_number>=32 -> OOB write past allocations. Requires 33+ MIDI devices (privileged driver attach). Fix: clamp maxunits to 32.