{
  "finding_id": "DF-3874",
  "title": "FW-controlled list counts (pd 240 / ld 64 / evt 15) walk fixed arrays -> heap OOB read + console leak",
  "verdict": "inconclusive (hardware-gated), likely",
  "impact": "heap info leak to console / OOB read (Low)",
  "reproduce": { "build": "n/a (needs misbehaving controller)", "run": "n/a", "expected": "OOB walk of kmalloc'd list buffers" },
  "kernel_refs": ["sys/dev/raid/mfi/mfi.c:1331","sys/dev/raid/mfi/mfi.c:1396","sys/dev/raid/mfi/mfi.c:1770","sys/dev/raid/mfi/mfireg.h:1148","sys/dev/raid/mfi/mfireg.h:1176","sys/dev/raid/mfi/mfi.c:1707"],
  "artifacts": ["README.md","VERDICT.md","fix.diff","manifest.json","verdict.json","env.txt"]
}