[dpdk-dev] [PATCH 1/2] common/sfc_efx/base: limit reported MCDI response length

Ferruh Yigit ferruh.yigit at intel.com
Tue May 18 18:41:07 CEST 2021


On 5/18/2021 4:10 PM, Ivan Malov wrote:
> From: Andy Moreton <amoreton at xilinx.com>
> 
> MCDI helper routines in libefx include length checks for response
> messages, to ensure that short replies and optional fields are
> handled correctly.
> 
> If the MCDI response message from the firmware is larger than the
> caller's buffer then the response length reported to the caller
> should be limited to the buffer size. Otherwise length checks in
> the caller may allow reading past the end of the buffer.
> 
> Fixes: 6f619653b9b1 ("net/sfc/base: import MCDI implementation")
> Cc: stable at dpdk.org
> 
> Signed-off-by: Andy Moreton <amoreton at xilinx.com>
> Signed-off-by: Ivan Malov <ivan.malov at oktetlabs.ru>
> Reviewed-by: Andrew Rybchenko <andrew.rybchenko at oktetlabs.ru>

Series applied to dpdk-next-net/main, thanks.


More information about the dev mailing list