DF-1401 / run.log
### build ### built trinity_nonclock_oob ### run ### DF-1401 trinity nonClockInfoIndex OOB-read demonstration nonClockInfoArray.ucNumEntries = 1 nonClockInfoIndex (from VBIOS) = 200 guard present? : NO (contrast clock path at :1789 which checks >= ucNumEntries) reads entry [200] of a 1-entry array -> OUT OF BOUNDS OOB bytes past array start read: ~3200 OOB-read flags value stored into power state: 0x00000000 OOB READ CONFIRMED: nonClockInfoIndex=200 used against ucNumEntries=1 with no bounds check; reads ~3200 bytes OOB from VBIOS into the power-state struct. READ-ONLY primitive -> no escalation; impact = wrong DPM settings / OOB info read (DoS via bogus clock programming on crafted VBIOS). ### exit=0 ###