[PATCH v2] ethdev: fix pointer check in GENEVE and RAW flow copy

[Stephen Hemminger]

On Tue, 19 May 2026 10:23:35 +0300
Denis Lyulin <lyulin.2003 at mail.ru> wrote:

> When rte_flow_conv_item_spec() is called from rte_flow_conv_pattern(),
> the spec, last and mask pointers are checked separately. If the API
> is used incorrectly, the spec pointer may be NULL while last and mask
> may be valid pointers. Also call of rte_flow_conv() with
> RTE_FLOW_CONV_OP_ITEM_MASK and item->spec == NULL may lead to the
> same problem.
> 
> In rte_flow_conv_item_spec() for GENVE_OPT and RAW item types the spec
> pointer is used even if the function is called to copy last or mask.
> It may cause a NULL pointer (spec) dereference.
> 
> This commit adds extra check of item->spec and if it is NULL, does not
> copy further data relying on it
> 
> Fixes: 841a0445442d ("ethdev: fix GENEVE option item conversion")
> Cc: michaelba at nvidia.com
> Cc: adrien.mazarguil at 6wind.com
> Cc: stephen at networkplumber.org
> Cc: stable at dpdk.org
> 
> Signed-off-by: Denis Lyulin <lyulin.2003 at mail.ru>
> ---

Applied to next-net