{
  "finding_id": "DF-4052",
  "title": "nfe_alloc_{rx,tx}_ring error paths destroy data[i].map in a loop over j - dmamap leak + tag map_count underflow on attach failure",
  "verdict": "untested",
  "impact": "none",
  "reproduce": {
    "build": "",
    "run": "",
    "expected": "n/a - requires nfe hardware + induced bus_dmamap_create failure during attach; source-certain"
  },
  "kernel_refs": [
    "sys/dev/netif/nfe/if_nfe.c:1726",
    "sys/dev/netif/nfe/if_nfe.c:1989",
    "sys/platform/pc64/x86_64/busdma_machdep.c:440"
  ],
  "artifacts": ["README.md", "VERDICT.md", "fix.diff", "manifest.json", "verdict.json"]
}