Re: [PATCH] drm/nouveau/gsp: validate sequencer command span

[Timur Tabi]

On Wed, 2026-07-22 at 12:21 +0800, Pengpeng Hou wrote:
> The GSP sequencer RPC contains a variable command stream. The handler
> currently walks commands using the stream header length without first
> proving that the stream, each command payload, or a register-save slot
> fits in the received RPC and its fixed save area.
> 
> Validate the stream and each command against the RPC payload before
> walking it, and reject register-save indexes beyond the fixed save
> array.
> 
> Signed-off-by: Pengpeng Hou <pengpeng@xxxxxxxxxxx>

Does this fix an known bug, or is it just something that an AI told you could be a problem?