# DF-2211 - Verification Verdict

**Status:** not_reproduced
**Impact:** none (hardening)
**Confidence:** certain

## Mechanism
amdgpu_afmt_acr declares struct amdgpu_afmt_acr res and, when the clock is not in the predefined table, fills only the six cts/n fields via amdgpu_afmt_calc_cts (lines 100-102); res.clock is never assigned and the struct is returned by value at line 104 with an uninitialized 4-byte field.

## Verdict
NOT REPRODUCED (hardware/module-gated on this QEMU guest) - code-certain line-level confirmation in the read-only sys/ tree. Callers embed res in audio ELD/CTS setup (kernel-internal drm paths); the garbage byte quartet influences display audio timing metadata, it is not copied to userspace verbatim. AMD GPU hardware absent in the QEMU guest.

## Threat / reachability
Requires the named hardware/module; see VERDICT.md.

## Privilege escalation assessment
n/a (device-gated)

## Fix
Set res.clock = clock before the calculated path (one line), matching the table entries which always carry clock.

## Kernel references
- `sys/dev/drm/amd/amdgpu/amdgpu_afmt.c:90`
- `sys/dev/drm/amd/amdgpu/amdgpu_afmt.c:100`
- `sys/dev/drm/amd/amdgpu/amdgpu_afmt.c:104`

## Fix status (batch validation)
Applied with the 36 sibling fix.diffs of this batch in findings/poc/_batch41/all_fixes.patch; single in-guest `make -j6 nativekernel KERNCONF=X86_64_GENERIC` completed RC=0 with zero errors under -Werror (full log: findings/poc/_batch41/fix_build8.log). Behavior A/B intentionally skipped for this Info-tier item.