{
  "verdict": "untested (hardware-gated)",
  "impact": "device-fed 16-bit page length steers the cache-detection walk up to ~64KB past the 512-byte DMA buffer (OOB kernel read, attach-time DoS ceiling)",
  "reproduce": {
    "build": "cc -O2 -Wall -o dpt_df4244_walk dpt_df4244_walk.c",
    "run": "./dpt_df4244_walk",
    "expected": "16383 accepted steps to buff+65536; 15361 reads past the 4096-byte page model (see run.log from guest)."
  },
  "kernel_refs": [
    "sys/dev/raid/dpt/dpt_scsi.c:648-669",
    "sys/dev/raid/dpt/dpt.h:341-344"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "dpt_df4244_walk.c",
    "build.sh",
    "run.sh",
    "build.log",
    "run.log",
    "env.txt",
    "fix.diff",
    "verdict.json",
    "manifest.json"
  ]
}