{
  "experiment": "upstream-drift re-check for the certified AVM AV2 defect sites",
  "pinned_baseline": {
    "commit": "917ddae7db6d340b96246cf337b319dbd9cf98a7",
    "describe": "research-v15.0.0",
    "commit_date": "2026-05-06T02:18:37Z"
  },
  "upstream": {
    "commit": "917ddae7db6d340b96246cf337b319dbd9cf98a7",
    "describe": "research-v15.0.0",
    "commit_date": "2026-05-06T02:18:37Z",
    "built": true,
    "error": null
  },
  "upstream_equals_pinned": true,
  "interpretation": "current upstream main is STILL AT the pinned baseline commit \u2014 AVM main has not advanced past it \u2014 so all sites reproduce on a CLEAN CLONE + CLEAN REBUILD (independent of the local pinned build). This is a clean-clone reproduction, NOT a drift delta; the check will surface FIXED_UPSTREAM automatically the moment AVM main advances past this commit.",
  "determinism_runs": 5,
  "n_sites": 6,
  "n_still_crashes": 6,
  "n_fixed_upstream": 0,
  "n_no_longer_reproduces": 0,
  "note": "A site that is FIXED_UPSTREAM is still a real finding on its pinned commit; the pinned reproducer + commit are preserved. The harness/method (Asset A) is the IP, not any single live crash.",
  "sites": [
    {
      "name": "bridge_frame",
      "source_site": "decodeframe.c:8529",
      "cwe": "null-deref/CWE-476 (DoS)",
      "repro": "artifacts/avm-finding/min_bridge_frame_null_deref.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/decoder/decodeframe.c:8529",
          "av2_dx_iface.c:1108",
          "av2_dx_iface.c:398",
          "av2_dx_iface.c:546",
          "avm_decoder.c:104",
          "avm_thread.c:179",
          "decodeframe.c:8529",
          "decodeframe.c:9611"
        ]
      }
    },
    {
      "name": "intra_copy_frame_mvs",
      "source_site": "decodemv.c:3196",
      "cwe": "null-deref/CWE-476 (DoS)",
      "repro": "artifacts/avm-finding/min_intra_copy_frame_mvs.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/decoder/decodemv.c:3196",
          "av2_dx_iface.c:1108",
          "av2_dx_iface.c:398",
          "av2_dx_iface.c:546",
          "avm_decoder.c:104",
          "avm_thread.c:179",
          "decodeframe.c:1507",
          "decodeframe.c:1881"
        ]
      }
    },
    {
      "name": "build_intra_predictors_high",
      "source_site": "reconintra.c:1440",
      "cwe": "null-deref/CWE-476 (DoS)",
      "repro": "artifacts/avm-finding/min_build_intra_predictors_high.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/common/reconintra.c:1440",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/avm_mem/avm_mem.c:83",
          "av2_dx_iface.c:1108",
          "av2_dx_iface.c:398",
          "av2_dx_iface.c:546",
          "avm_decoder.c:104",
          "avm_mem.c:83",
          "avm_thread.c:179"
        ]
      }
    },
    {
      "name": "setup_pre_planes",
      "source_site": "reconinter.c:3814",
      "cwe": "null-deref/CWE-476 (DoS)",
      "repro": "artifacts/avm-finding/min_setup_pre_planes.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/decoder/decodeframe.c:845",
          "av2_dx_iface.c:1108",
          "av2_dx_iface.c:398",
          "av2_dx_iface.c:546",
          "avm_decoder.c:104",
          "avm_thread.c:179",
          "decodeframe.c:1230",
          "decodeframe.c:1572"
        ]
      }
    },
    {
      "name": "predict_intra_block",
      "source_site": "reconintra.c:1707",
      "cwe": "null-deref/CWE-476 (DoS)",
      "repro": "artifacts/avm-finding/min_predict_intra_block.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/common/reconintra.c:1707",
          "av2_dx_iface.c:1108",
          "av2_dx_iface.c:398",
          "av2_dx_iface.c:546",
          "avm_decoder.c:104",
          "avm_thread.c:179",
          "decodeframe.c:1133",
          "decodeframe.c:1572"
        ]
      }
    },
    {
      "name": "decoder_decode_layerid_oob",
      "source_site": "av2_dx_iface.c:1032",
      "cwe": "out-of-bounds array read (CWE-129/CWE-125)",
      "repro": "artifacts/avm-finding/min_decoder_decode_oob_av2_dx_iface1032.ivf",
      "pinned_status": "CRASH",
      "upstream_status": "STILL_CRASHES",
      "replay": {
        "runs": 5,
        "crashes": 5,
        "ratio": 1.0,
        "observed_sites": [
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1032",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1034",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1035",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1047",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1049",
          "2/06_video_codec_discovery_foundry/tools/avm_upstream/av2/av2_dx_iface.c:1050",
          "av2_dx_iface.c:1032",
          "av2_dx_iface.c:1034"
        ]
      }
    }
  ]
}