diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-22 15:53:24 -0400 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-22 15:53:24 -0400 |
| commit | bdf1369d39d6767b4c857e7ddb8f8fdd87cb682e (patch) | |
| tree | e0bce06eabf2d29ec7272383342941b000f8d8db /kernel | |
| parent | 737aabc28bb4340e80cf801abf85cfc9e6443644 (diff) | |
| download | open-iov-bdf1369d39d6767b4c857e7ddb8f8fdd87cb682e.tar.gz open-iov-bdf1369d39d6767b4c857e7ddb8f8fdd87cb682e.zip | |
r487b tighten the RM_CONTROL reply clamp margin: the guest rejected rpc.length 65528 (its element header > 8 bytes); clamp to 16*4096 - 512 so any element-header size fits the bound
Diffstat (limited to 'kernel')
| -rw-r--r-- | kernel/gsp_rm_emulation.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/gsp_rm_emulation.c b/kernel/gsp_rm_emulation.c index 10633ab..53270b8 100644 --- a/kernel/gsp_rm_emulation.c +++ b/kernel/gsp_rm_emulation.c @@ -3428,7 +3428,7 @@ static void gsp_rm_handle_rm_control(struct gsp_emu_context *ctx, * staying zero exactly like the small-control generic reply. */ #define GSPRM_WIRE_REPLY_PARAMS_MAX \ - (GSPRM_QUEUE_ELEMENT_SIZE * 16 - 8 - 32 - GSP_RM_CTRL_HDR_SIZE) + (GSPRM_QUEUE_ELEMENT_SIZE * 16 - 512) if (out_params_size > GSPRM_WIRE_REPLY_PARAMS_MAX) { nv_vgpu_info(ctx->vgpu, "vgsp-rm: RM_CONTROL cmd=0x%x out=%u clamped to %u (wire record limit; guest would reject the record)", |