| From: Stefano Brivio <sbri...@redhat.com> | Sent: Friday, August 25, 2017 1:48 PM | | Passing commands for logging to t4_record_mbox() with size | MBOX_LEN, when the actual command size is actually smaller, | causes out-of-bounds stack accesses in t4_record_mbox() while | copying command words here: | ...
Thanks for catching this. Definitely a bug. Odd because that's not what I checked into our out-of-kernel repository. And the corresponding code in the cxgb4vf driver is correct. So yes, ACK! Casey
