Re: [PATCH net] net: phy: air_en8811h: refuse a firmware blob that is not a multiple of 4
From: Jakub Kicinski
Date: Wed Sep 02 2026 - 19:24:49 EST
On Wed, 2 Sep 2026 08:05:25 +0000 Aleksei Sviridkin wrote:
> The download loop streams the blob into the MCU as 32-bit words and
> reads the last word past the end of a blob whose size is not a multiple
> of four. The shipped blobs happen to be aligned, so the overread never
> showed; a truncated or foreign file would carry up to three bytes of
> whatever follows it into the MCU. Reject it before the first write
> instead.
When you repost please explain how this was discovered, and tested.