Re: [PATCH net v2 07/10] net: systemport: Fix out-of-bounds array accesses in DSA queue mapping
From: Jakub Kicinski
Date: Mon Sep 28 2026 - 20:05:59 EST
On Tue, 22 Sep 2026 16:24:37 -0700 Florian Fainelli wrote:
> The priv->ring_map array has a fixed size of (DSA_MAX_PORTS * 8). In
> bcm_sysport_select_queue(), bcm_sysport_map_queues(), and
> bcm_sysport_unmap_queues(), indices calculated as
> (qp + port * num_tx_queues) were accessed without checking against
> ARRAY_SIZE(priv->ring_map). If unusual port or queue configurations are
> encountered, this could lead to out-of-bounds array accesses.
same question - can this really happen?
Does "unusual port or queue configuration" imply some runtime config?
Or bad DT?