DF-1468 processpptables VBIOS clock-info index OOB read harness
array->ucNumEntries   = 1 (the real length)
sizeof(UVDClockInfo)  = 6
redzone marker        = vclk_hi=0xbb vclk_lo=0xbeef

In-bounds  ucUVDClockInfoIndex=0 (< ucNumEntries) -> vclk=0x112233 (OK)
OOB        ucUVDClockInfoIndex=1 (>= ucNumEntries) -> vclk=0xbbbeef
Worst case ucUVDClockInfoIndex=255 -> kernel reads at byte offset 1530 past entries[0]

read at entries[1] returned the redzone marker (0xbb/0xbeef): YES -> OOB read proven

RESULT: heap OOB read CONFIRMED (processpptables.c:1101 pattern)
ucUVDClockInfoIndex/ucVCEClockInfoIndex/clockInfoIndex/nonClockInfoIndex
(all UCHAR, VBIOS) index into flex arrays with NO check vs ucNumEntries.
soft_pp_table_size is available (:844) but never used as a bound.
RUN_EXIT=0