From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 17EEA37B021 for ; Thu, 26 Mar 2026 10:54:49 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.133.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774522490; cv=none; b=UQvDE1rPWuMfdy7xsRmPwEhFKqQfs/wvMgsBKvqxNLUrkfpQLV05OTEUIpO7AQ/4+q2BrttgQRc63aRCeQmjR2EKquD/NcSANUG6bTHEn0ii9Be/qKRoGmA7ETa6P+B5M8Wa9z82U/aj0MJ5zCsuiZGqFTkeX6YEfWMVyrktC8g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774522490; c=relaxed/simple; bh=YFWNJ/3lNDIRnqBs1+DDl56h16Xs6SvccfOduX6eJWM=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=sgxJKtPuNX9kWFC3SijZrMeAIisAiUInfrrV2qxuKkUm7yQ1h9+PJhngjF7bW1OxCq8U6kyqYwrmh4BlYeGv8C5NiWkmkWc2Y5kZh1utVJoiszn5zpAbP9Q+OGqdd8XeixBwsre7lpYR65+DePOKa97TSfnkhs9JizFKUfkkhlw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=IU8lUqId; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b=iPKe5NdY; arc=none smtp.client-ip=170.10.133.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="IU8lUqId"; dkim=pass (2048-bit key) header.d=redhat.com header.i=@redhat.com header.b="iPKe5NdY" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1774522488; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vQyYxg7ABGBbUtlt/fVW7qUEWYEXN8azicKwPpeysDM=; b=IU8lUqIdH5XRxumbxn9vkOFq382dlJKPazA6LaBaiTM1APdvxu9hmOCGSYFi4NoF4yCGW/ 3udZOLpQZGEeZ97syChfclzJ/F0jDa1ElLB4fqeQKeZX1pfR6LKenaivHvtlOarlZI+9dG sCm1A8s17k5oH7bn6T3xx6WtM+bn6k8= Received: from mail-wm1-f72.google.com (mail-wm1-f72.google.com [209.85.128.72]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-210-9zKJ79ueNeu72Bt1dXTX-g-1; Thu, 26 Mar 2026 06:54:47 -0400 X-MC-Unique: 9zKJ79ueNeu72Bt1dXTX-g-1 X-Mimecast-MFC-AGG-ID: 9zKJ79ueNeu72Bt1dXTX-g_1774522486 Received: by mail-wm1-f72.google.com with SMTP id 5b1f17b1804b1-4853a9467c5so3626835e9.2 for ; Thu, 26 Mar 2026 03:54:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=google; t=1774522486; x=1775127286; darn=vger.kernel.org; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=vQyYxg7ABGBbUtlt/fVW7qUEWYEXN8azicKwPpeysDM=; b=iPKe5NdYviWF/wPtdt5LDq0t09XxuYwm0Q9mjNTdCZnKkiPEkpexKl9n1L96wOHvHH cTxB220+2tr3nofL1sNT3j9gVXRDZu3nlBqiylvb8vNFUR1QEHz/DOn2kLhlDkch6e59 ApiLxS8vBP7YLnVYhkySerZe+nu/07GCfACgpcC/4vtMt5HoDGnHm3V475bQ3akLrecu RP5C3e9MP6ep9eg2cXbq/WAvX32TMmAsulXsDkf0rLalAckLHhrDNek0GkeGN6KGoHgU q6HQzBqpAvN/k+vHVq5GnmhEwj+w2xeQO16nflndhHj3SEH9fXRJJjnzjQrGVvzC8TiX 602g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774522486; x=1775127286; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=vQyYxg7ABGBbUtlt/fVW7qUEWYEXN8azicKwPpeysDM=; b=E+Zwo0qk3v3VH84uXhAFxHFJ3qyRzLpSlsrNovf1X/9LUs5NCWXwz+lPkxav4rMgOz ULF84iupPKqGLXIazkIh8DpN8iN7On0ClPiqJPOBv5KWnH4WMDcJdEOK8zO6Qu1Dwqv8 mg/rREQoxKxHf0rHbD1HCQjYHTMg+qXx+tr+3qLZmAtwYyKNLEwThuoGwns1xBavtsyr NtP7ZNS3ub2dTIGCo29mldJOGskaryiMCXjzjQ6afb4l/+vGyTCa2loimUDOrOKOtIdu lQ155IhcrttxjEPtLoUXhPi4r6cwavncTEtSmB46VmaHR3QslKGfqQp/EOOz+iEb4FhQ yrVQ== X-Forwarded-Encrypted: i=1; AJvYcCW5GQd/ghNQUOP3VfVv8C42bcJaJrCDDN4rkKEgJp7QKWt43y7TK7oN/koNg6sOI7hcNhCBoODjaQ7QUfw=@vger.kernel.org X-Gm-Message-State: AOJu0Yxyv9hEHN9jslSvvHPAAn8aqejYS4gYxUwN24Cjc7blYB59REJx 4suOJRdMypOPHdTnpQt6lRWtNInaQIe87MI+XXl+AyqMCrv/ie67oPWZ63LHK4p3yORJlEHF2zK 9NShuIhTb+m8ikItYGd/7YrU4b2kI3tOC5NSv5N7ZNzENFUIWZCPExmvSRE7xvcDyvg== X-Gm-Gg: ATEYQzzUkcsYRR/HV/Dg0nVEA22rftHGJ5fWQ0d6hOZBEGpIkYzHYdyCNvM714BqalF O59VsJPTqo0I+qhV3m1U9aAuZkoF2D4aOH620rXYyPZVRFnmcUc6p2URwN25nOnKwe3NfBTxrZv SgzwPHWLaR4cOK1ozqZWwmS9kZLhsqNLtjnp+JZdR2L1uulueo61IotLoNyKnTdvHDT0tPvOQEV FF6WpVFFfZTVMBAKqEyxkY4gXXBasWPTPcIRxw/0i22qX2j9KZSj1+RW6KLLYvwJn7hhuCx27MG 2NuE7XL4hSuGd7pmKDaCc1r+3kz1EdYpBxg2lE+lk9Cu/h/6L4kxKZKpiqRgayNNVgfAsA5wVES pE78jJqnHh3YGA/MhkpYFdYRIOdFpq0WDxDibb7lIlJ+Ul615TQL1yg3+ X-Received: by 2002:a05:600c:630f:b0:483:8062:b2f with SMTP id 5b1f17b1804b1-48715fc37acmr100312595e9.6.1774522485716; Thu, 26 Mar 2026 03:54:45 -0700 (PDT) X-Received: by 2002:a05:600c:630f:b0:483:8062:b2f with SMTP id 5b1f17b1804b1-48715fc37acmr100312325e9.6.1774522485269; Thu, 26 Mar 2026 03:54:45 -0700 (PDT) Received: from [192.168.88.32] ([212.105.153.60]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-48722c8cfdcsm36225815e9.8.2026.03.26.03.54.44 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 26 Mar 2026 03:54:44 -0700 (PDT) Message-ID: <3e352003-730e-4215-b91b-86f876965f3e@redhat.com> Date: Thu, 26 Mar 2026 11:54:43 +0100 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] qede: validate TPA aggregation indices from CQEs To: Simon Horman , Pengpeng Hou Cc: andrew+netdev@lunn.ch, davem@davemloft.net, edumazet@google.com, kuba@kernel.org, Pavel.Zhigulin@kaspersky.com, netdev@vger.kernel.org, linux-kernel@vger.kernel.org References: <20260323072415.60149-1-pengpeng@iscas.ac.cn> <20260324175701.GD111839@horms.kernel.org> Content-Language: en-US From: Paolo Abeni In-Reply-To: <20260324175701.GD111839@horms.kernel.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 3/24/26 6:57 PM, Simon Horman wrote: > On Mon, Mar 23, 2026 at 03:24:15PM +0800, Pengpeng Hou wrote: >> The fast-path TPA handlers index rxq->tpa_info[] directly with the >> completion-provided tpa_agg_index field. That field is only a raw u8 in >> the CQE layout, while rxq->tpa_info has ETH_TPA_MAX_AGGS_NUM entries. >> >> Reject out-of-range indices before touching rxq->tpa_info[] and recycle >> the affected receive BDs instead of indexing past the fixed aggregation >> state array. > > I'm not sure that we need to guard against out of range values here. > Can it actually happen? Seconding Simon's opinion: it looks like such bad values can be possible only due memory corruption or the H/W going wild. In both case the real problem is somewhere else. If you have a good explanation for the root cause, please add to the commit message together with a suitable fixes tag and re-submit. /P