On 2/25/25 10:08, Martyna Szapar-Mudlaw wrote:
From: Mateusz Polchlopek <mateusz.polchlo...@intel.com>

Fix using the untrusted value of proto->raw.pkt_len in function
ice_vc_fdir_parse_raw() by verifying if it does not exceed the
VIRTCHNL_MAX_SIZE_RAW_PACKET value.

Fixes: 99f419df8a5c ("ice: enable FDIR filters from raw binary patterns for 
VFs")
Signed-off-by: Mateusz Polchlopek <mateusz.polchlo...@intel.com>
Signed-off-by: Martyna Szapar-Mudlaw <martyna.szapar-mud...@linux.intel.com>
---
  .../ethernet/intel/ice/ice_virtchnl_fdir.c    | 25 +++++++++++++------
  1 file changed, 17 insertions(+), 8 deletions(-)

Reviewed-by: Przemek Kitszel <przemyslaw.kits...@intel.com>

Reply via email to