Claude review: accel/ethosu: reject DMA commands with uninitialized length

[Claude Code Review Bot <claude-review@example.com>]

Overall Series Review

Subject: accel/ethosu: reject DMA commands with uninitialized length
Author: Muhammad Bilal <meatuni001@gmail.com>
Patches: 1
Reviewed: 2026-05-25T17:05:58.467707

---

This is a single-patch fix for the Arm Ethos-U NPU accelerator driver's command stream validation. The patch addresses a real issue: when `dma->len` is left at its sentinel value (`U64_MAX` from the `memset(0xff)` initialization) and the DMA mode involves stride arithmetic, integer wrapping can cause `dma_length()` to return a small value instead of `U64_MAX`, potentially bypassing bounds checks downstream in `ethosu_job.c`.

The fix is correct in principle — early-returning `U64_MAX` before any arithmetic prevents the wrapping. However, there are accuracy issues in the commit message, and the fix is incomplete since the `NPU_OP_DMA_START` handler doesn't actually validate the return value.

**Verdict: The fix is a valid hardening improvement but the commit message overstates the exploitability, and the DMA path has a deeper missing-validation issue that this patch does not address.**

---
Generated by Claude Code Patch Reviewer