Re: [PATCH v2 4/6] scsi: ufs: rpmb: Validate request frame length before parsing

[Peter Wang (王信友)]

On Fri, 2026-07-17 at 23:39 +0800, Li Qiang wrote:
> The RPMB core only verifies that request and response buffers are
> 
> nonempty. This callback reads req_resp at the end of the first
> request
> 
> frame before validating the request length.
> 
> Require a complete frame before that access.
> 
> Fixes: b06b8c421485 ("scsi: ufs: core: Add OP-TEE based RPMB driver
> for UFS devices")
> Signed-off-by: Li Qiang <liqiang01@xxxxxxxxxx>
> ---

Reviewed-by: Peter Wang <peter.wang@xxxxxxxxxxxx>