DF-4122 / run.2.log
== i915 VBT parse harness (verbatim code from sys/dev/drm/i915/intel_bios.c) == mode=edp patched=0 [DF-4122] crafted VBT accepted (74 bytes); BDB_EDP last block declared size = 1 byte [DF-4122] sizeof(struct bdb_edp) = 216; parse_edp reads edp->color_depth at +160 and power_seqs[0] at +0 with no block-size floor OOB read confirmed: SIGSEGV touching 0x80047509f (offset +233 from watched buffer base 0x800474fb6) RESULT: VULNERABLE — out-of-bounds read taken by verbatim kernel parse code (exit 77)