{
  "finding_id": "DF-3860",
  "title": "gpu_info firmware payload read at unvalidated ucode_array_offset_bytes (kernel heap OOB read) in amdgpu_device_parse_gpu_info_fw",
  "verdict": "not_reproduced",
  "impact_source_level": "kernel heap OOB read / info disclosure via AMDGPU_INFO cu_info",
  "reproduce": {
    "build": "./build.sh (python3 make_gpuinfo_fw.py; no compilation)",
    "run": "./run.sh (hardware gate check); on VEGA10 hw: install crafted fw, kldload amdgpu",
    "expected": "amdgpu_device.c:1379-1396 reads fw->data+0x7fff0000..+60 (60-byte OOB read); KASAN-class kernels flag it; bogus cu_info in AMDGPU_INFO"
  },
  "kernel_refs": ["sys/dev/drm/amd/amdgpu/amdgpu_device.c:1354", "sys/dev/drm/amd/amdgpu/amdgpu_device.c:1361", "sys/dev/drm/amd/amdgpu/amdgpu_device.c:1375", "sys/dev/drm/amd/amdgpu/amdgpu_device.c:1379", "sys/dev/drm/amd/amdgpu/amdgpu_ucode.c:251", "sys/dev/drm/amd/amdgpu/amdgpu_ucode.h:135"],
  "artifacts": ["README.md", "VERDICT.md", "make_gpuinfo_fw.py", "build.sh", "run.sh", "build.log", "run.log", "env.txt", "fix.diff", "manifest.json", "verdict.json"]
}