{
  "finding_id": "DF-4239",
  "status": "untested",
  "attempts": 0,
  "reproduced": 0,
  "confidence": "certain",
  "impact": "Stale ata_xfer resid propagated to CAM for zero-data commands: sili_unload_prb skips the resid update when datalen==0 and the completion copies the previous commands resid into csio->resid. Operator-group /dev/passN users receive bogus resid for zero-data commands; can mask real short-transfer conditions.",
  "verdict": "source-verified; hardware-gated (no sili HBA on audit guest)",
  "exploit_chain": [],
  "evidence": "sili.c:1278-1290 resid gated on datalen!=0; sili_cam.c:1667/1714 unconditional copy",
  "kernel_refs": [
    "sys/dev/disk/sili/sili_cam.c:1667",
    "sys/dev/disk/sili/sili_cam.c:1714"
  ],
  "guest_uname": "",
  "code_hash": "",
  "artifact_dir": "findings/poc/DF-4239/",
  "fix_status": "not_testable",
  "fix_baseline_reproduced": 0,
  "fix_patched_reproduced": 0,
  "fix_verdict": "zero resid for no-data commands in both completions, or init ccb_xa.resid=0 in sili_get_ccb so recycling cannot leak stale accounting",
  "fix_evidence": "source-only"
}