{
  "finding_id": "DF-3925",
  "title": "hptmv_event_notify uses closed-blob param2 as MV_U8 channel index into sataEvents[8]/VDevices[8] with no bounds check (hardening)",
  "verdict": "not_reproduced (hardware-gated; caller is closed blob)",
  "impact_potential": "OOB write/pointer use inside IAL_ADAPTER_T if blob misbehaves",
  "reproduce": {
    "build": "n/a",
    "run": "unverifiable - caller is precompiled raid.o blob; needs RR1820 + misbehaving core",
    "expected": "n/a (defense-in-depth finding)"
  },
  "kernel_refs": ["sys/dev/raid/hptmv/entry.c:860", "sys/dev/raid/hptmv/entry.c:864", "sys/dev/raid/hptmv/entry.c:875", "sys/dev/raid/hptmv/osbsd.h:170"],
  "artifacts": ["README.md", "VERDICT.md", "fix.diff", "env.txt", "manifest.json", "verdict.json"]
}