> -----Original Message-----
> From: Steve Yang <stevex.y...@intel.com>
> Sent: Thursday, November 10, 2022 4:31 PM
> To: dev@dpdk.org
> Cc: Wu, Jingjing <jingjing...@intel.com>; Xing, Beilei
> <beilei.x...@intel.com>;
> Yang, SteveX <stevex.y...@intel.com>
> Subject: [PATCH v2] net/iavf: fix taninted scalar
>
> tainted_data_downcast: Downcasting match_item->meta from void * to
> struct virtchnl_proto_hdrs implies that the data that this pointer points to
> is
> tainted.
>
> var_assign_var: Assigning: proto_hdrs = match_item->meta.
> Both are now tainted.
>
> var_assign_var: Assigning: rss_meta->proto_hdrs = *proto_hdrs. Both are
> now tainted.
>
> Passing tainted expression "rss_meta->proto_hdrs.count" to
> "iavf_refine_proto_hdrs", which uses it as a loop boundary.
>
> Removed temporary variable 'proto_hdrs', and copied whole memory of
> match_item meta with exact structure size to avoid data downcast.
>
> Coverity issue: 381131
>
> Fixes: 91f27b2e39ab ("net/iavf: refactor RSS")
>
> Signed-off-by: Steve Yang <stevex.y...@intel.com>
Acked-by: Qi Zhang <qi.z.zh...@intel.com>
Applied to dpdk-next-net-intel.
Thanks
Qi
