Re: [PATCH v4] scsi: mvumi: reject handshake sizes that overflow the list allocations

From: Yehyeong Lee

Date: Wed Oct 14 2026 - 11:29:25 EST


Please drop this patch. It is superseded by

[PATCH v5 0/6] scsi: mvumi: bound the values the firmware supplies
<20261014151914.3632701-1-yhlee@xxxxxxxxxxxxxxxxxx>
https://lore.kernel.org/linux-scsi/20261014151914.3632701-1-yhlee@xxxxxxxxxxxxxxxxxx/

where it is 4/6, with one addition: it also rejects an entry size too small
to hold the frames the driver puts in the entry.
mvumi_internal_cmd_sgl() writes one scatter-gather element at payload[0]
whatever host->sg_tablesize says, and the max_sg subtraction in
mvumi_io_attach() wraps when ib_max_size is below
sizeof(struct mvumi_msg_frame), so the lower bound was missing from this
version.

The series also folds in the two-patch length series I posted separately
and adds three more bounds from a full pass over the driver.