Re: [PATCH net v2] bnxt_en: Bound SW TPA IDs to prevent crashes

[Michael Chan]

On Mon, Aug 24, 2026 at 5:18 PM Joe Damato <joe@xxxxxxx> wrote:
> Fix this by allocating rx_tpa with bp->max_tpa rounded up to the next
> power of 2 (bp->max_tpa_roundup_size) entries and masking the FW TPA ID
> with that size, so the wrapped ID can never index past the end of the
> array.
>
> Fixes: 54c28fab2fa5 ("bnxt_en: Set bp->max_tpa according to what the FW supports")
> Reported-by: Raphael Cardoso Fernandes <raphaelcf@xxxxxxxx>
> Suggested-by: Michael Chan <michael.chan@xxxxxxxxxxxx>
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Joe Damato <joe@xxxxxxx>

Thanks.
Reviewed-by: Michael Chan <michael.chan@xxxxxxxxxxxx>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature