Re: [PATCH] scsi: mpt3sas: validate variable event array spans

[James Bottomley]

On Wed, 2026-07-22 at 12:12 +0800, Pengpeng Hou wrote:
> SAS topology, PCIe topology and IR configuration events contain
> flexible arrays whose element counts are supplied by firmware. Their
> interrupt-time handlers use NumEntries or NumElements without first
> checking that the corresponding array fits in EventData.

Please explain why we might need to check this.  The device is a fat
firmware one meaning the driver is usually set up with the correctly
matching limits to the ones the firmware returns.

Regards,

James