# DF-4556 — dce_aux partial AUX read reassembly at wrong offset

## Build
No code: the trigger is DP-sink behavior (short-read ACK). See trigger.md.

## Run
Follow trigger.md on an AMD-GPU host with a programmable DP sink / aux
emulator. The audit guest has Bochs VGA only — nothing to run (env.txt).

## Expected
A >16-byte DPCD/EDID read whose chunks are ACKed short returns
SUCCEEDED with buffer content `[chunk2 | zeros | stale]` instead of
`[chunk1 | chunk2]` — kernel-assembled data corruption the driver then
uses for link training / mode selection. Data-integrity bug, no overflow
(copy bounded by returned_byte <= current_read_length <= payload.length).

## Success criterion
On affected hardware: assembled read buffer contains chunk-2 at offset 0.
After fix.diff (reply.data = ctx->buffer + ctx->offset): chunks concatenate
in order.