{
  "finding_id": "DF-5616",
  "title": "icu_ioapic_extint(): signed lower-bound validation gap (irq<0 passes) -> UB shift feeding the live 8259 IMR; lockless/shadow-unsynced IMR write (boot-safe today, caller-gated)",
  "verdict": "reproduced",
  "impact": "none",
  "severity": "Info",
  "file": "sys/platform/pc64/icu/icu.c",
  "lines": [167, 170, 176, 180],
  "reproduce": {
    "build": "guest# cd /root/icuintro && sh build.sh",
    "run": "guest# cd /root/icuintro && sh run.sh",
    "expected": "P4: icu_ioapic_extint(-1,0x20)=0 IMR1_after=0xff ... shadow_untouched=YES; restored IMR={fb,ff}; P6 alive; guest stays up"
  },
  "kernel_refs": [
    "sys/platform/pc64/icu/icu.c:167",
    "sys/platform/pc64/icu/icu.c:170",
    "sys/platform/pc64/icu/icu.c:176-180",
    "sys/platform/pc64/apic/ioapic_abi.c:1064",
    "sys/platform/pc64/apic/ioapic_abi.c:1073"
  ],
  "artifacts": [
    "README.md", "VERDICT.md", "icuintro.c", "Makefile", "build.sh", "run.sh",
    "build.log", "run.log", "panic.txt", "env.txt", "fix.diff",
    "manifest.json", "verdict.json"
  ]
}