{
  "finding_id": "DF-4967",
  "title": "radeon_gart_bind/unbind take a 32-bit offset: GTT aperture offsets >= 4 GiB truncate and alias GART entries across buffer objects",
  "bucket_hint": "base:drm",
  "verdict": "untested",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "cc -O2 -Wall -o gart_math gart_math.c",
    "run": "./gart_math",
    "expected": "ALL CHECKS PASSED (0 failures) - arithmetic validation only; kernel behavior requires radeon hardware absent from this guest"
  },
  "kernel_refs": [
    "sys/dev/drm/radeon/radeon_gart.c:241",
    "sys/dev/drm/radeon/radeon_gart.c:286",
    "sys/dev/drm/radeon/radeon_gart.c:299",
    "sys/dev/drm/radeon/radeon_device.c:1137",
    "sys/dev/drm/radeon/radeon_ttm.c:656",
    "sys/dev/drm/radeon/radeon_ttm.c:941"
  ],
  "artifacts": ["README.md", "VERDICT.md", "gart_math.c", "build.sh", "run.sh", "build.log", "run.log", "env.txt", "fix.diff", "verdict.json", "manifest.json"]
}