== i915 VBT parse harness (verbatim code from sys/dev/drm/i915/intel_bios.c) ==
mode=sdvo patched=0

[DF-4121] crafted VBT accepted by intel_bios_is_valid_vbt (97 bytes)
[DF-4121] BDB_SDVO_PANEL_DTDS is the last block, data size = 18 bytes (1 DTD)
[DF-4121] panel_type from BDB_SDVO_LVDS_OPTIONS = 255 (no bounds check in this tree)
[DF-4121] reading struct lvds_dvo_timing (18 bytes) at dvo_timing + 255*18 = +4590 bytes past block data start
OOB read confirmed: SIGSEGV touching 0x8004761e0 (offset +4673 from watched buffer base 0x800474f9f)
RESULT: VULNERABLE — out-of-bounds read taken by verbatim kernel parse code (exit 77)