On Fri, 13 Feb 2026 10:26:28 +0000
Anatoly Burakov <[email protected]> wrote:

> Currently, when calling down into the VF mailbox, IPsec code will use
> dynamic memory allocation (rte_malloc one at that!) to allocate VF message
> structures which are ~40 bytes in size, and then immediately frees them.
> This is wasteful and unnecessary, so use stack allocation instead.
> 
> Signed-off-by: Anatoly Burakov <[email protected]>
> ---

AI spotted this:

Patch 17/27 — net/iavf: avoid rte malloc in VF mailbox for IPsec
Warning (Correctness — Uninitialized stack memory)

The stack-allocated anonymous structs (sa_req, sa_resp, sp_req, sp_resp) are 
not zero-initialized. The originals used rte_malloc (not rte_zmalloc), so this 
isn't a regression per se — the old code also didn't zero the buffers. However, 
since these are sent as virtchnl messages, it would be safer to add = {0} for 
defense in depth, particularly since individual field assignment may miss 
padding.

This is lower priority than patch 22 since the old code had the same issue.

Reply via email to