Thread (3 messages) flat view 3 messages, 3 authors, 2d ago

Re: [PATCH net] net: phy: air_en8811h: refuse a firmware blob that is not a multiple of 4

From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-09-02 23:04:02
Also in: lkml

On Wed,  2 Sep 2026 08:05:25 +0000 Aleksei Sviridkin wrote:
The download loop streams the blob into the MCU as 32-bit words and
reads the last word past the end of a blob whose size is not a multiple
of four. The shipped blobs happen to be aligned, so the overread never
showed; a truncated or foreign file would carry up to three bytes of
whatever follows it into the MCU. Reject it before the first write
instead.
When you repost please explain how this was discovered, and tested.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help