Claude review: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

[Claude Code Review Bot <claude-review@example.com>]

Overall Series Review

Subject: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers
Author: Ashutosh Desai <ashutoshdesai993@gmail.com>
Patches: 1
Reviewed: 2026-05-16T16:05:47.888904

---

This is a single-patch fix for out-of-bounds reads in three DP MST sideband reply parsers. The core problem is real: when reading 16-bit fields as `(raw->msg[idx] << 8) | raw->msg[idx+1]`, the preceding bounds check `idx > raw->curlen` only validates the first byte, not the second. The fix — changing to `idx + 2 > raw->curlen` — is correct and minimal.

However, the patch misses the **same bug** in a fourth function in the same file, and the commit message slightly overstates the practical consequence of the OOB read.

**Verdict**: The fix itself is correct but incomplete. The same 2-byte read pattern with insufficient bounds checking exists in `drm_dp_sideband_parse_resource_status_notify()` at line 1127, which should be fixed in the same patch (or a follow-up mentioned in the cover letter).

---

---
Generated by Claude Code Patch Reviewer