{
  "finding_id": "DF-3430",
  "file": "sys/netproto/802_11/wlan/ieee80211_wds.c",
  "title": "ieee80211_create_wds leaks the find_node_locked reference in the 'station in use' branch: permanent node refcount inflation",
  "verdict": "untested",
  "impact": "none",
  "severity": "Low",
  "reproduce": {
    "build": "n/a",
    "run": "n/a (Low severity -> Phase V skipped per policy; no radio on guest)",
    "expected": "two WDS vaps on one station, alternating up/down -> node never reclaimed (refcount permanently >=1 above truth)"
  },
  "kernel_refs": ["sys/netproto/802_11/wlan/ieee80211_wds.c:149-188", "sys/netproto/802_11/wlan/ieee80211_node.c:1391"],
  "artifacts": ["README.md","trigger_create_wds_refleak.c","fix.diff","verdict.json","manifest.json"]
}