Re: [PATCH v2 1/1] nvme: fix FDP configuration log parsing

From: Nitesh Shetty

Date: Wed May 27 2026 - 05:13:40 EST


On 27/05/26 10:29AM, liuxixin wrote:
<cover.1779848573.git.gliuxen@xxxxxxxxx>
From: liuxixin <gliuxen@xxxxxxxxx>
Date: Wed, 27 May 2026 10:22:32 +0800
Subject: [PATCH v2 1/1] nvme: fix FDP configuration log parsing

The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=,
incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).

Also validate descriptor sizes while walking the list so dsze == 0 or a
descriptor past the log end cannot cause unbounded iteration or reads past
the buffer.

Fixes: 30b5f20bb2ddab013035399e5c7e6577da49320a ("nvme: register fdp parameters with the block layer")

Signed-off-by: liuxixin <gliuxen@xxxxxxxxx>

Reviewed-by: Nitesh Shetty <nj.shetty@xxxxxxxxxxx>