Re: [PATCH net v2 1/2] net: ncsi: validate response packet length before accessing fields
From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-09-17 00:17:23
Also in:
lkml
On Sat, 12 Sep 2026 19:09:37 +0100 Aamir Ahmed wrote:
ncsi_validate_rsp_pkt() takes a pointer to the response header and then reads the checksum at the end of the padded payload, without checking that the skb holds either. ncsi_rcv_rsp() reads the common header the same way before that.
Patches need to be posted in one thread, which is the default for git send-email. Patch 2 should be in reply to patch 1. Please repost.