{
 "finding_id": "DF-3858",
 "title": "vega20_get_sclk_od/get_mclk_od: count-1 underflow wild read and DIV_ROUND_UP divide-by-zero on zero golden clock (DF-3686/DF-3707 twins)",
 "verdict": "not_reproduced (kernel reach hardware-gated; SIGFPE 3/3 and +34GiB wild-index arithmetic proven on guest)",
 "impact_ceiling": "unprivileged local DoS via panic + wild kernel OOB read (world-readable pp_sclk_od/pp_mclk_od) on Vega20 in affected states",
 "reproduce": {
  "build": "vm.sh run_root 'cc -O2 -Wall -o /tmp/od_div0 /tmp/od_div0.c'",
  "run": "vm.sh run_root '/tmp/od_div0 0; /tmp/od_div0 1'",
  "expected": "case A: SIGFPE exit=136; case B: index 4294967295, offset 34359738360 bytes"
 },
 "kernel_refs": [
  "sys/dev/drm/amd/powerplay/hwmgr/vega20_hwmgr.c:1326",
  "sys/dev/drm/amd/powerplay/hwmgr/vega20_hwmgr.c:1332",
  "sys/dev/drm/amd/powerplay/hwmgr/vega20_hwmgr.c:1372",
  "sys/dev/drm/amd/powerplay/hwmgr/vega20_hwmgr.c:1378",
  "sys/dev/drm/amd/powerplay/hwmgr/vega20_hwmgr.c:546",
  "sys/dev/drm/amd/powerplay/hwmgr/ppatomfwctrl.c:523",
  "sys/dev/drm/amd/amdgpu/amdgpu_pm.c:1019"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "od_div0.c",
  "build.sh",
  "run.sh",
  "run.log",
  "run.2.log",
  "env.txt",
  "fix.diff",
  "verdict.json",
  "manifest.json"
 ],
 "code_hash": "34ee6096eb4ecba3dfd207e3288e83bdc5adf2a0e7d33c8487d630d907de7004"
}