{
  "finding_id": "DF-3599",
  "title": "cz_init_cp_jump_table: NULL mec2_fw dereference on Carrizo when MEC2 firmware request fails",
  "verdict": "inconclusive",
  "impact": "boot/probe-time kernel panic (NULL-page read) on CZ with missing amdgpufw_carrizo_mec2",
  "reproduce": {
    "build": "(none; source assertion)",
    "run": "./run.sh",
    "expected": "shows err=0/mec2_fw=NULL fallback at :1170-1173, max_me=5 for CZ at :1309-1310, unguarded mec2_fw->data at :1349"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1170",
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1309",
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1349",
    "sys/dev/drm/amd/amdgpu/gfx_v8_0.c:1418"
  ],
  "artifacts": ["run.sh", "run.log", "README.md", "VERDICT.md", "fix.diff", "manifest.json", "verdict.json"]
}