On Wed, Mar 11, 2026 at 03:21:35PM +0000, Bruce Richardson wrote:
> On Mon, Mar 09, 2026 at 03:29:19PM +0000, Ciara Loftus wrote:
> > When a RTE_FLOW_ITEM_TYPE_RAW item is used with a non-zero length,
> > the spec and mask pattern pointers are dereferenced unconditionally
> > in a loop, causing a segfault if either is NULL. Additionally, no
> > check is made that the spec and mask have equal lengths before
> > iterating, which could result in out-of-bounds access.
> >
> > Add validation before the loop: reject the item if either pattern
> > pointer is NULL, or if the spec and mask lengths differ.
> >
> > Bugzilla ID: 1155
> > Fixes: 6ced3dd72f5f ("net/i40e: support flexible payload parsing for FDIR")
> > Cc: [email protected]
> >
> > Signed-off-by: Ciara Loftus <[email protected]>
>
> Missed carrying-forward Anatoly's ack from v1:
> Acked-by: Anatoly Burakov <[email protected]>
Applied to dpdk-next-net-intel.
Thanks,
/Bruce
