{
  "finding_id": "DF-3815",
  "title": "mpr_resize_queues() divide-by-zero when firmware reports IOCMaxChainSegmentSize == 1",
  "verdict": "inconclusive",
  "impact": "none demonstrated at runtime; source-certain panic (device-controlled)",
  "reproduce": {
    "build": "n/a (kernel path)",
    "run": "present a (malicious/broken) SAS3 device whose IOC Facts reply has IOCMaxChainSegmentSize=1; attach or facts-changing reinit",
    "expected": "integer divide trap -> kernel panic at mpr.c:431-432"
  },
  "kernel_refs": ["sys/dev/raid/mpr/mpr.c:397-402", "sys/dev/raid/mpr/mpr.c:416", "sys/dev/raid/mpr/mpr.c:431-432", "sys/dev/raid/mpr/mprvar.h:52-53"],
  "artifacts": ["README.md", "VERDICT.md", "probe.log", "fix.diff", "manifest.json", "verdict.json"]
}