{
  "finding_id": "DF-5581",
  "title": "Intel graphics stolen-memory reservation is compiled out; drm/i915 trusts unreserved firmware values and its only conflict guard is a no-op rman stub",
  "verdict": "not_reproduced",
  "impact": "kernel/GPU physical-memory aliasing (kernel memory corruption by GPU DMA) on Intel gen3+ platforms with buggy-BIOS memory maps; not manifestable on the QEMU rig",
  "reproduce": {
    "build": "n/a (no kernel component buildable on the rig; QEMU has no Intel iGPU device model)",
    "run": "sh probe.sh  (equivalently: vm.sh run_user 'sysctl hw.intel_graphics_stolen_base hw.intel_graphics_stolen_size'; vm.sh run_root 'pciconf -l; grep -rn phys_avail_reserve /usr/src/sys/ --include=*.c --include=*.h')",
    "expected": "sysctls world-readable and 0 (vendor gate rejects Bochs VGA 0x1234 at 0:2:0); full-tree grep shows phys_avail_reserve ONLY as the commented-out call at pci_early_quirks.c:309; i915 not loaded"
  },
  "kernel_refs": [
    "sys/bus/pci/x86_64/pci_early_quirks.c:264",
    "sys/bus/pci/x86_64/pci_early_quirks.c:303",
    "sys/bus/pci/x86_64/pci_early_quirks.c:308",
    "sys/platform/pc64/x86_64/machdep.c:2760",
    "sys/dev/drm/i915/i915_module.c:18",
    "sys/dev/drm/i915/i915_gem_stolen.c:85",
    "sys/dev/drm/i915/i915_gem_stolen.c:414"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "probe.sh",
    "run.log",
    "fix.diff",
    "manifest.json",
    "verdict.json"
  ]
}