DF-4621 / demo_run.log
input: lane_count=5 (invalid: not 1/2/4), link_rate=0xa (valid) ACCEPTED by the single valid_input flag (amdgpu_dm_debugfs.c:195-221) stored preferred_link_setting.lane_count = 5 (dc.c:484, unvalidated) loop iteration r=4: OOB write at &lane_settings[4] -- past lane_settings[LANE_COUNT_DP_MAX-1=3] canary=0 allow_invalid_msa_timing_param overwritten=0 (stack OOB in kernel: adjacent frame data) => with lane_count 0xffffffff the loop is unbounded (linear stack smash) exit=0