{
  "finding_id": "DF-2853",
  "title": "rman_reserve_resource alignment-roundup unsigned wrap -> overlapping / out-of-region resource allocation",
  "verdict": "reproduced",
  "impact": "memcorrupt (kernel resource metadata corruption, double allocation)",
  "reproduce": {
    "build": "in guest: cd rman_overlap dir && ./build.sh (cc -DKLD_MODULE ... + ld.bfd -r; see build.sh)",
    "run": "in guest as root: kldload ./rman_overlap.ko ; dmesg | grep rman_overlap",
    "expected": "EVIL1 E=[0x2000,0x2000] REPRODUCED inside allocated B=[0x1FFF,0x2FFF]; EVIL2 X=[0x1FFF] double-allocated; guest stays up"
  },
  "kernel_refs": [
    "sys/kern/subr_rman.c:236-254",
    "sys/kern/subr_rman.c:285-327",
    "sys/platform/pc64/x86_64/nexus.c:398",
    "sys/dev/acpica/acpi.c:1156",
    "sys/dev/pccard/cardbus/cardbus_cis.c:533-539"
  ],
  "artifacts": [
    "rman_overlap.c", "Makefile", "build.sh", "run.sh",
    "run.log", "dmesg.txt", "env.txt",
    "panic-sysctl-walk.txt", "fix.diff",
    "VERDICT.md", "verdict.json", "manifest.json",
    "fix_build.log", "fix_run.log"
  ]
}