{
  "finding_id": "DF-3704",
  "title": "vega10_odn_edit_dpm_table signed-compare lets negative user long pass bounds check -> wild kernel write",
  "verdict": "inconclusive",
  "impact": "source-certain privileged wild write; not demonstrable on guest",
  "reproduce": {
    "build": "n/a — sysfs write",
    "run": "Vega10+OD, root: echo 's -1 1600 1150' > .../pp_od_clock_voltage",
    "expected": "kernel memory corruption at entries[(uint32_t)-1] (crash at minimum)"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/powerplay/hwmgr/vega10_hwmgr.c:4884",
    "sys/dev/drm/amd/powerplay/hwmgr/vega10_hwmgr.c:4893",
    "sys/dev/drm/amd/amdgpu/amdgpu_pm.c:584"
  ],
  "artifacts": ["README.md","VERDICT.md","trigger_notes.c","build.sh","run.sh","run.log","env.txt","fix.diff","manifest.json","verdict.json"]
}