# DF-4970 — xe pccard: DINGO flag never set (dead switch case in probe flag loop)

`sys/dev/netif/xe/if_xe_pccard.c:311` — the flag-propagation loop
`for (i = 1; i != XE_CARD_TYPE_FLAGS_DINGO; i = i << 1)` terminates when
`i == 4` (DINGO) *before* evaluating it, so `case XE_CARD_TYPE_FLAGS_DINGO`
is dead code and `scp->dingo` is never set for any card — including the
CEM56/REM56 "Dingo" combo cards whose table entries
(`if_xe_pccard.c:119-122`) set exactly that flag.

## Files
- `dingo_flags.c`  — logic harness: verbatim tables + stock and fixed loops
- `build.sh`       — `cc -O -Wall -o dingo_flags dingo_flags.c`
- `run.sh`         — run harness (expect VIOLATION lines for 0x110006/0x110007)
- `run.log`, `run.2.log`, `run.3.log` — 3 runs, identical result
- `fix.diff`       — one-line fix (`!=` → `<=`)
- `fix_build.log`  — patched `if_xe.ko` builds on the guest with `-Werror`
- `env.txt`        — guest environment (no PCMCIA hardware)

## Reproduce
```
sh build.sh && sh run.sh
```
Expected decisive lines:
```
0x110006   CEM56    ... stock=0,1,0      fixed=0,1,1
           VIOLATION: CEM56 is a Dingo card but scp->dingo == 0 in the STOCK loop
stock loop ever sets dingo: NO (case is dead code)
RESULT: VIOLATIONS FOUND   (exit=1)
```

Kernel-path reproduction is impossible on this guest (no PCMCIA controller /
no PC card slot is emulated by this QEMU setup) — see VERDICT.md.