Re: [PATCH net] bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
From: Andrew Lunn
Date: Fri Mar 13 2026 - 08:04:34 EST
> +++ b/drivers/net/ethernet/broadcom/bnxt/bnxt.c
> @@ -2929,6 +2929,8 @@ static int bnxt_async_event_process(struct bnxt *bp,
> u16 type = (u16)BNXT_EVENT_BUF_PRODUCER_TYPE(data1);
> u32 offset = BNXT_EVENT_BUF_PRODUCER_OFFSET(data2);
>
> + if (type >= BNXT_TRACE_MAX)
> + goto async_event_process_exit;
> bnxt_bs_trace_check_wrap(&bp->bs_trace[type], offset);
Using ARRAY_SIZE(&bp->bs_trace) makes it clearer why you are doing the
check.
Andrew