{
 "finding_id": "DF-4304",
 "file": "sys/dev/netif/bfe/if_bfe.c",
 "verdict": "inconclusive (source-certain + harness-proven index-space gap; bfe hardware absent)",
 "impact_class": "none (driver runtime gated) - local DoS (livelock/panic) on real bfe(4) hardware",
 "reproduce": {
  "build": "cc -o /root/bfe_walk_harness /root/bfe_walk_harness.c",
  "run": "vm.sh run_root '/root/bfe_walk_harness; ifconfig -l; pciconf -l | grep -i -E \"14e4|broadcom\" || echo NO_BROADCOM_PCI; sysctl hw.bfe'",
  "expected": "Harness prints: encodable indices 0..511 with 511 OUTSIDE the 511-entry ring; 'current=511: walk NEVER TERMINATES'; RESULT line confirming non-termination. Presence probes show no Broadcom PCI device and unknown oid hw.bfe (driver cannot attach in this guest)."
 },
 "kernel_refs": [
  "sys/dev/netif/bfe/if_bfe.c:1064",
  "sys/dev/netif/bfe/if_bfe.c:1070",
  "sys/dev/netif/bfe/if_bfe.c:1080",
  "sys/dev/netif/bfe/if_bfe.c:1106",
  "sys/dev/netif/bfe/if_bfe.c:1109",
  "sys/dev/netif/bfe/if_bfe.c:549",
  "sys/dev/netif/bfe/if_bfereg.h:69",
  "sys/dev/netif/bfe/if_bfereg.h:405",
  "sys/dev/netif/bfe/if_bfereg.h:426"
 ],
 "artifacts": [
  "README.md",
  "VERDICT.md",
  "bfe_walk_harness.c",
  "build.sh",
  "run.sh",
  "build.log",
  "run.log",
  "env.txt",
  "fix.diff",
  "manifest.json",
  "verdict.json"
 ]
}