{
 "finding_id": "DF-4667",
 "poc_id": "DF-4667",
 "status": "untested",
 "reproduced": 0,
 "impact": "None today (sole caller passes value==mask); future callers could silently skip an SMC firmware-ready handshake and race the microcontroller during clock/voltage programming",
 "confidence": "certain",
 "attempts": 0,
 "guest_uname": null,
 "code_hash": null,
 "exploit_chain": [],
 "evidence": "phm_wait_on_indirect_register passes (mask, value) to a (index, value, mask) callee - provable against the sibling at :185 which passes correctly. Latent argument-order hazard. Info/hardening; no pack.",
 "kernel_refs": [
  "sys/dev/drm/amd/powerplay/hwmgr/smu_helper.c:147",
  "sys/dev/drm/amd/powerplay/hwmgr/smu_helper.c:148"
 ],
 "verdict": "not_run: Info, latent-only (sole caller insensitive to the swap)",
 "fix_status": "not_testable",
 "fix_baseline_reproduced": 0,
 "fix_patched_reproduced": 0,
 "fix_verdict": "not_testable",
 "fix_evidence": "swap-to-match-callee one-liner in finding markdown"
}