{
  "finding_id": "DF-5446",
  "title": "Unchecked 4-byte logical-ID bcopy on short PNP_TAG_LOGICAL_DEVICE (pnp.c:444)",
  "verdict": "untested",
  "impact": "none",
  "confidence": "likely",
  "reproduce": {
    "build": "",
    "run": "",
    "expected": "static analysis only: up to 3-byte read past declared tag data (worst case past the kmalloc allocation into uninitialized heap), tainted logical_id reaches isa_set_logicalid/quirk matching/console probe output"
  },
  "kernel_refs": [
    "sys/bus/isa/pnp.c:444",
    "sys/bus/isa/pnp.c:419-425",
    "sys/bus/isa/pnpparse.c:95"
  ],
  "artifacts": [
    "README.md", "verdict.json", "manifest.json"
  ]
}