[PATCH] net/bnxt: fix ctx_dma_arr allocation size
Evgeny Sokolov
Evgeny.Sokolov at infotecs.ru
Tue Sep 15 10:56:06 CEST 2026
From: Sokolov Evgeny <Evgeny.Sokolov at infotecs.ru>
ctx_dma_arr stores rte_iova_t entries, but the allocation size was
calculated using sizeof(rte_iova_t *) instead of sizeof(rte_iova_t).
Use the correct element size when allocating the array to match the
actual data type stored in ctx_dma_arr.
Fixes: 4371b402c7b ("net/bnxt: fix array overflow")
Cc: stable at dpdk.org
Signed-off-by: Sokolov Evgeny <Evgeny.Sokolov at infotecs.ru>
---
drivers/net/bnxt/bnxt_ethdev.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/net/bnxt/bnxt_ethdev.c b/drivers/net/bnxt/bnxt_ethdev.c
index a2429561b9..2754725566 100644
--- a/drivers/net/bnxt/bnxt_ethdev.c
+++ b/drivers/net/bnxt/bnxt_ethdev.c
@@ -5054,7 +5054,7 @@ static int bnxt_alloc_ctx_mem_blk(struct bnxt *bp,
snprintf(name, RTE_MEMZONE_NAMESIZE, "bnxt_ctx_dma_arr%s_%x_%d",
suffix, idx, bp->eth_dev->data->port_id);
- ctx_pg->ctx_dma_arr = rte_zmalloc(name, sizeof(rte_iova_t *) * rmem->nr_pages, 0);
+ ctx_pg->ctx_dma_arr = rte_zmalloc(name, sizeof(rte_iova_t) * rmem->nr_pages, 0);
if (ctx_pg->ctx_dma_arr == NULL)
return -ENOMEM;
--
2.30.2
More information about the stable
mailing list