> -----Original Message-----
> From: Steve Yang <[email protected]>
> Sent: Thursday, November 10, 2022 4:31 PM
> To: [email protected]
> Cc: Wu, Jingjing <[email protected]>; Xing, Beilei
> <[email protected]>;
> Yang, SteveX <[email protected]>
> Subject: [PATCH v2] net/iavf: fix taninted scalar
>
> tainted_data_downcast: Downcasting match_item->meta from void * to
> struct virtchnl_proto_hdrs implies that the data that this pointer points to
> is
> tainted.
>
> var_assign_var: Assigning: proto_hdrs = match_item->meta.
> Both are now tainted.
>
> var_assign_var: Assigning: rss_meta->proto_hdrs = *proto_hdrs. Both are
> now tainted.
>
> Passing tainted expression "rss_meta->proto_hdrs.count" to
> "iavf_refine_proto_hdrs", which uses it as a loop boundary.
>
> Removed temporary variable 'proto_hdrs', and copied whole memory of
> match_item meta with exact structure size to avoid data downcast.
>
> Coverity issue: 381131
>
> Fixes: 91f27b2e39ab ("net/iavf: refactor RSS")
>
> Signed-off-by: Steve Yang <[email protected]>
Acked-by: Qi Zhang <[email protected]>
Applied to dpdk-next-net-intel.
Thanks
Qi
