diff options
| author | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-12 16:22:16 -0400 |
|---|---|---|
| committer | Arthur Hanson Rasmusson <arthur@vgpu.io> | 2026-10-12 16:22:16 -0400 |
| commit | 54a8f7b3385cccedac3f74a73ae9bc04089203d0 (patch) | |
| tree | 906d408c66e0da5a422e793db07856c24a8772e6 /wiki/open-iov.org/images/6/63 | |
| parent | f3cd10e0bdf5f4379c57f048d7e589612f8ac6e1 (diff) | |
| download | open-iov-54a8f7b3385cccedac3f74a73ae9bc04089203d0.tar.gz open-iov-54a8f7b3385cccedac3f74a73ae9bc04089203d0.zip | |
vgsp-sema: reject all-FF continuation chunks in the CE push read; try the displaced pin pair
The r129 cross-page evidence: a 216-byte CE push whose SET_SEMAPHORE_A +
LAUNCH_DMA tail fell in the next 4 KB page, whose injected pin resolved to
an all-0xFF page while the first page decoded perfectly. A continuation
chunk read from an unvalidated source (injected pin, its displaced pair, or
the linear window guess) is now rejected when the whole chunk is 0xFF, the
displaced ipin-alt pair is tried as a new source, and a bounded line names
the rejected (va, pa, src) at the fix site.
Diffstat (limited to 'wiki/open-iov.org/images/6/63')
0 files changed, 0 insertions, 0 deletions