From bdf1369d39d6767b4c857e7ddb8f8fdd87cb682e Mon Sep 17 00:00:00 2001 From: Arthur Hanson Rasmusson Date: Thu, 22 Oct 2026 15:53:24 -0400 Subject: r487b tighten the RM_CONTROL reply clamp margin: the guest rejected rpc.length 65528 (its element header > 8 bytes); clamp to 16*4096 - 512 so any element-header size fits the bound --- kernel/gsp_rm_emulation.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'kernel') diff --git a/kernel/gsp_rm_emulation.c b/kernel/gsp_rm_emulation.c index 10633ab..53270b8 100644 --- a/kernel/gsp_rm_emulation.c +++ b/kernel/gsp_rm_emulation.c @@ -3428,7 +3428,7 @@ static void gsp_rm_handle_rm_control(struct gsp_emu_context *ctx, * staying zero exactly like the small-control generic reply. */ #define GSPRM_WIRE_REPLY_PARAMS_MAX \ - (GSPRM_QUEUE_ELEMENT_SIZE * 16 - 8 - 32 - GSP_RM_CTRL_HDR_SIZE) + (GSPRM_QUEUE_ELEMENT_SIZE * 16 - 512) if (out_params_size > GSPRM_WIRE_REPLY_PARAMS_MAX) { nv_vgpu_info(ctx->vgpu, "vgsp-rm: RM_CONTROL cmd=0x%x out=%u clamped to %u (wire record limit; guest would reject the record)", -- cgit v1.2.3