Date: Fri, 14 Feb 2025 10:42:03 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 284073] bnxt: kernel panic on 14.2-RELEASE Message-ID: <bug-284073-7501-ghFbhQEzJ5@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-284073-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-284073-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284073 --- Comment #27 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3D3de231b4d956f7b9c22e31f75805030a4= 17f7bf3 commit 3de231b4d956f7b9c22e31f75805030a417f7bf3 Author: Zhenlei Huang <zlei@FreeBSD.org> AuthorDate: 2025-02-14 10:38:29 +0000 Commit: Zhenlei Huang <zlei@FreeBSD.org> CommitDate: 2025-02-14 10:38:29 +0000 bnxt_en: Retrieve maximum of 128 APP TLVs It appears that the maximum number of APP TLVs supported by the hardware is 128 according to D45005. Well Daniel Porsch reported an issue PR2840= 73 which shows that the number can exceed the limit, causing out of bound write to on-stack allocated variable app[128] and the kernel panics. Limit to 128 while retrieving APP TLVs. PR: 284073 Reviewed by: markj Tested by: Daniel Porsch <daniel.porsch@loopia.se> Fixes: 35b53f8c989f bnxt_en: Add PFC, ETS & App TLVs protocols support MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D48589 sys/dev/bnxt/bnxt_en/bnxt.h | 3 ++- sys/dev/bnxt/bnxt_en/bnxt_dcb.c | 17 ++++++++++------- sys/dev/bnxt/bnxt_en/bnxt_mgmt.c | 1 + sys/dev/bnxt/bnxt_en/bnxt_sysctl.c | 2 +- 4 files changed, 14 insertions(+), 9 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-284073-7501-ghFbhQEzJ5>