diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-09 14:52:22 -0400 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-09 14:52:22 -0400 |
| commit | f5ee072aa3ea42f67eb5df20b1b3d71c19829368 (patch) | |
| tree | 4f0ede7e96c3752ed1dd052a216c691d70da99bf /debug/issue | |
| parent | 70ea49c667eb101b90730ed7a5077a7d7444c9ef (diff) | |
| download | open-iov-f5ee072aa3ea42f67eb5df20b1b3d71c19829368.tar.gz open-iov-f5ee072aa3ea42f67eb5df20b1b3d71c19829368.zip | |
vgsp-sema: validate the CE ring entry0 before trusting the layout USERD (ISSUE-0002)
r41 c1 regressed: svc_lookup answered rank4's fresh gpfifo VA with an
unrelated FB offset (0x90000) and the idle acceptance cemented the wrong
USERD (ring+0x10000 of the bogus base). Gate the layout-derived USERD on
the ring's entry0 decoding to a CE push VA + plausible len, the same
check svc_ring_autopin already uses; a bogus ring now falls through to
the previous candidate list.
Diffstat (limited to 'debug/issue')
0 files changed, 0 insertions, 0 deletions