DF-4937 / verdict.json
{"finding_id":"DF-4937","status":"untested","attempts":0,"reproduced":0,"impact":"none","confidence":"speculative","verdict":"Latent output-param contract violation (Info/speculative), v1 twin: default branch leaves *atom_clock_type uninitialized while returning true; the v1 consumer set_dce_clock declares the variable uninit and trusts the return. Unreachable today (enum-closed) and doubly gated by the fallback-only parser. retCode=false fix.","exploit_chain":"none today (enum-closed + fallback-only parser)","evidence":"findings/poc/DF-4937/ (this verdict)","kernel_refs":["sys/dev/drm/amd/display/dc/bios/dce112/command_table_helper_dce112.c:333-356","sys/dev/drm/amd/display/dc/bios/command_table.c:2428-2441"],"guest_uname":"","code_hash":""}
|