diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-11-13 09:33:17 -0500 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-11-13 09:33:17 -0500 |
| commit | 7d27df77ac1f52816a7a741b39674e99e9c5f7bd (patch) | |
| tree | ee46eeacc8053890520a8a6a5542d6a01a3c9583 /tools/cuda-ab/ip_probe3.cu | |
| parent | 6668e2d0ded583a81d8496facfb9ad86f3cc2ede (diff) | |
| download | open-iov-7d27df77ac1f52816a7a741b39674e99e9c5f7bd.tar.gz open-iov-7d27df77ac1f52816a7a741b39674e99e9c5f7bd.zip | |
vgsp: reject the dense-lookalike class in svc_gr_ram_ring_scan (entry0==entry1 gate)
The GL client ring content scan admitted the lookalike page measured at
pa 0x10a828000 / 0x10ad3e000 (dword 0x04000100 repeating) whose entry0 and
entry1 decode identically (va=0x4000100 len=262144) and which passed every
window/terminus gate. The pump then read a phantom 256 KiB push at VA
0x4000100 forever (sema-rdw rc=-2, sema-entry: unread, unregistered
submissions=0; c271/c285), poisoning the client-VAS verify chain. A real
ring does not repeat one entry verbatim in slots 0/1.
Partial validation: c288 (fixed module) resolved the REAL ring pair via the
VAS (pa=0x235f7c000, entry0 va=0x4000000 len=2236) and decoded real client
pushes (submissions=15, CB-DIAG match=67). End-to-end pixel validation
(gl_frames px0 != 0) is still pending; c286/c287 did not exercise the scan
(no channel created).
Diffstat (limited to 'tools/cuda-ab/ip_probe3.cu')
0 files changed, 0 insertions, 0 deletions