Re: [PATCH net v2] bnxt_en: Bound SW TPA IDs to prevent crashes
Michael Chan <[email protected]>
| Newsgroups | org.kernel.vger.stable,dev.linux.lists.llvm,org.kernel.vger.linux-kernel,org.kernel.vger.netdev |
|---|---|
| Message-ID | <CACKFLimMbDGDfLXchSNyi06UEfaTBh9m+GN8=rcWRCFJopbaqw@mail.gmail.com> |
On Mon, Aug 24, 2026 at 5:18 PM Joe Damato <[email protected]> wrote: > Fix this by allocating rx_tpa with bp->max_tpa rounded up to the next > power of 2 (bp->max_tpa_roundup_size) entries and masking the FW TPA ID > with that size, so the wrapped ID can never index past the end of the > array. > > Fixes: 54c28fab2fa5 ("bnxt_en: Set bp->max_tpa according to what the FW supports") > Reported-by: Raphael Cardoso Fernandes <[email protected]> > Suggested-by: Michael Chan <[email protected]> > Cc: [email protected] > Signed-off-by: Joe Damato <[email protected]> Thanks. Reviewed-by: Michael Chan <[email protected]>
smime.p7s
(application/pkcs7-signature, 5.3 KB) - not displayed