Re: [PATCH] Bluetooth: btusb: validate QCA rampatch size

From: Laxman Acharya Padhya

Date: Fri Jul 31 2026 - 14:58:59 EST


Hi Luiz,

I have not yet received confirmation from a Qualcomm engineer.

Shuai, since you recently worked on this QCA rampatch path, could you
please confirm whether requiring the firmware to contain both the complete
device-specific rampatch header and the version structure at ver_offset is
the correct size validation for all entries in qca_devices_table[]?

The proposed minimum is:

max_t(size_t, info->rampatch_hdr,
info->ver_offset + sizeof(struct qca_rampatch_version))

Thanks,
Laxman