diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-09 14:52:22 -0400 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-09 14:52:22 -0400 |
| commit | 088fa8f3e854ff33fe2d1188d2d237942956b918 (patch) | |
| tree | 207eae76f97d37602416a5c536b101e27eeb4086 /README.md | |
| parent | 439cb2e0b28267a9e2645b9555e85f0dd3008c1b (diff) | |
| download | open-iov-088fa8f3e854ff33fe2d1188d2d237942956b918.tar.gz open-iov-088fa8f3e854ff33fe2d1188d2d237942956b918.zip | |
vgsp-sema: validate the CE ring entry0 before trusting the layout USERD (ISSUE-0002)
r41 c1 regressed: svc_lookup answered rank4's fresh gpfifo VA with an
unrelated FB offset (0x90000) and the idle acceptance cemented the wrong
USERD (ring+0x10000 of the bogus base). Gate the layout-derived USERD on
the ring's entry0 decoding to a CE push VA + plausible len, the same
check svc_ring_autopin already uses; a bogus ring now falls through to
the previous candidate list.
Diffstat (limited to 'README.md')
0 files changed, 0 insertions, 0 deletions