[PATCH v2 0/2] net/bnxt: fix two ULP parser/mapper safety issues
Mohammad Shuab Siddique
mohammad-shuab.siddique at broadcom.com
Tue Oct 13 19:19:53 CEST 2026
From: Mohammad Shuab Siddique <mohammad-shuab.siddique at broadcom.com>
Two independent hardening changes in the ULP parser and mapper, found by
static analysis.
v2:
- 1/2: reworded as hardening: all current callers pass sizeof() of a
protocol field, so there is no known overflow; drop Fixes and Cc:
stable. No code change.
- 2/2: swap the blocks in place instead of allocating a temporary
buffer, so there is no per-flow heap allocation and no -ENOMEM path;
retitled accordingly; drop Fixes and Cc: stable.
Dakota Sicher (2):
net/bnxt: cap memcpy at field size
net/bnxt: remove VLA from EM key block swap
drivers/net/bnxt/tf_ulp/ulp_mapper_tfc.c | 18 ++++++++++--------
drivers/net/bnxt/tf_ulp/ulp_rte_parser.c | 10 ++++++++++
2 files changed, 20 insertions(+), 8 deletions(-)
--
2.47.3
More information about the dev
mailing list