{
  "finding_id": "DF-4036",
  "title": "Unclamped VBIOS SCLK/MCLK DPM counts overflow polaris10 SMC GraphicsLevel[8]/MemoryLevel[4] and the 384-byte STACK MC-arb timing table",
  "file": "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c",
  "verdict": "inconclusive",
  "impact": "none (demonstrated source-certain; hw-gated)",
  "severity": "High",
  "reproduce": {
    "build": "./build.sh",
    "run": "./run.sh",
    "expected": "run.log section DF-4036 shows the OOB/panic-branch/fault proof"
  },
  "kernel_refs": [
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1000",
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1017",
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1138",
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1145",
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1365",
    "sys/dev/drm/amd/powerplay/smumgr/polaris10_smumgr.c:1374",
    "sys/dev/drm/amd/powerplay/inc/smu74_discrete.h:179",
    "sys/dev/drm/amd/powerplay/inc/smu74_discrete.h:281",
    "sys/dev/drm/amd/powerplay/hwmgr/smu7_hwmgr.c:783"
  ],
  "artifacts": [
    "polaris_walks.c",
    "build.sh",
    "run.sh",
    "build.log",
    "run.log",
    "env.txt",
    "fix.diff",
    "fix_build.log",
    "README.md",
    "VERDICT.md",
    "manifest.json",
    "verdict.json"
  ]
}