Re: [PATCH] nfp: reject truncated hwinfo table

From: Jakub Kicinski

Date: Tue Sep 08 2026 - 16:59:20 EST


On Tue, 8 Sep 2026 01:54:37 +0100 David Carlier wrote:
> hwinfo_db_validate() only bounds db->size from above, so a firmware
> table advertising size < sizeof(*db) + sizeof(u32) makes the following
> "size -= sizeof(u32)" underflow and crc32_posix() read far out of
> bounds. Reject such tables before the subtraction.

AFAIU it's okay to assume that PCIe devices are not malicious
Let's not waste time with these sort of "fixes"
--
pw-bot: reject