Re: [PATCH net v2] bnxt_en: Bound SW TPA IDs to prevent crashes

Michael Chan <[email protected]>
Newsgroups org.kernel.vger.stable,dev.linux.lists.llvm,org.kernel.vger.linux-kernel,org.kernel.vger.netdev
Message-ID <CACKFLimMbDGDfLXchSNyi06UEfaTBh9m+GN8=rcWRCFJopbaqw@mail.gmail.com>
On Mon, Aug 24, 2026 at 5:18 PM Joe Damato <[email protected]> wrote:
> Fix this by allocating rx_tpa with bp->max_tpa rounded up to the next
> power of 2 (bp->max_tpa_roundup_size) entries and masking the FW TPA ID
> with that size, so the wrapped ID can never index past the end of the
> array.
>
> Fixes: 54c28fab2fa5 ("bnxt_en: Set bp->max_tpa according to what the FW supports")
> Reported-by: Raphael Cardoso Fernandes <[email protected]>
> Suggested-by: Michael Chan <[email protected]>
> Cc: [email protected]
> Signed-off-by: Joe Damato <[email protected]>

Thanks.
Reviewed-by: Michael Chan <[email protected]>
smime.p7s (application/pkcs7-signature, 5.3 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.