ipc-helper.c: reject invalid SOF_MEM_CAPS_* bits

Fixes lack of SOF_MEM_CAPS_* input validation found in #8832

Signed-off-by: Marc Herbert <marc.herbert@intel.com>

src/include/ipc/topology.h

@@ -86,6 +86,8 @@ struct sof_ipc_comp {
 #define SOF_MEM_CAPS_CACHE		BIT(6) /**< cacheable */
 #define SOF_MEM_CAPS_EXEC		BIT(7) /**< executable */
 #define SOF_MEM_CAPS_L3			BIT(8) /**< L3 memory */
+/* Don't forget to update when adding a new bit to the ABI. */
+#define SOF_MEM_CAPS_LOWEST_INVALID	BIT(9) /**< Used for input validation */
 
 /*
  * overrun will cause ring buffer overwrite, instead of XRUN.

src/ipc/ipc-helper.c

@@ -36,6 +36,15 @@
 
 LOG_MODULE_DECLARE(ipc, CONFIG_SOF_LOG_LEVEL);
 
+static bool valid_ipc_buffer_desc(const struct sof_ipc_buffer *desc)
+{
+	if (desc->caps >= SOF_MEM_CAPS_LOWEST_INVALID)
+		return false;
+
+	/* TODO: check desc->size and maybe other things */
+	return true;
+}
+
 /* create a new component in the pipeline */
 struct comp_buffer *buffer_new(const struct sof_ipc_buffer *desc, bool is_shared)
 {
@@ -44,6 +53,12 @@ struct comp_buffer *buffer_new(const struct sof_ipc_buffer *desc, bool is_shared
 	tr_info(&buffer_tr, "buffer new size 0x%x id %d.%d flags 0x%x",
 		desc->size, desc->comp.pipeline_id, desc->comp.id, desc->flags);
 
+	if (!valid_ipc_buffer_desc(desc)) {
+		tr_err(&buffer_tr, "Invalid buffer desc! New size 0x%x id %d.%d caps 0x%x",
+		       desc->size, desc->comp.pipeline_id, desc->comp.id, desc->caps);
+		return NULL;
+	}
+
 	/* allocate buffer */
 	buffer = buffer_alloc(desc->size, desc->caps, desc->flags, PLATFORM_DCACHE_ALIGN,
 			      is_shared);

src/ipc/ipc3/handler.c

@@ -76,6 +76,9 @@ LOG_MODULE_DECLARE(ipc, CONFIG_SOF_LOG_LEVEL);
 #define iGS(x) ((x) & SOF_GLB_TYPE_MASK)
 #define iCS(x) ((x) & SOF_CMD_TYPE_MASK)
 
+/* FIXME: assert() is most likely turned off in production builds
+ * https://open-std.org/jtc1/sc22/wg14/www/docs/n1967.htm
+ */
 #define _IPC_COPY_CMD(rx, tx, rx_size)					\
 	do {								\
 		int ___ret;						\