On Thu, 17 Sep 2026 12:40:09 +0530
Rahul Bhansali <[email protected]> wrote:

> From: Rakesh Kudurumalla <[email protected]>
> 
> Populate mbuf from WQE_PTR_CPTR and CPTR_WQE_PTR completions, handle
> WQE_PTR_ANTI_REPLAY and CPTR_ANTI_REPLAY, and pass the mbuf pointer
> into the inline device work callback instead of a fixed non-NULL
> sentinel.
> 
> Signed-off-by: Rakesh Kudurumalla <[email protected]>
> Signed-off-by: Rahul Bhansali <[email protected]>
> ---

Patch 7/14 common/cnxk: derive mbuf from CPT CQ in inline IRQ path
------------------------------------------------------------------
Error: NULL dereference at this commit.
- WQE_PTR_ANTI_REPLAY now calls work_cb() with sa = NULL and
  cq_type NIX_INL_INB_CPT_CQ.
- At this commit, cn20k_eth_sec_sso_work_cb() still does
    inb_priv = roc_nix_inl_ow_ipsec_inb_sa_sw_rsvd(args);
    if (inb_priv->eth_sec && ...
  which is PLT_PTR_ADD(NULL, HW_SZ) followed by a dereference.
- The guard only arrives in patch 8.
Squash 7 and 8, or move the guard first.

Reply via email to