[PATCH net 0/2] RDMA/rxe: fix mr_check_range() iova overflow (OOB)
Gang Yan <[email protected]> Tue, 28 Jul 2026 17:11:26 +0800
| Newsgroups | org.kernel.vger.linux-rdma |
|---|---|
| Message-ID | <[email protected]> |
From: Gang Yan <[email protected]> Hi, Maintainers I've recently started learning RDMA, using soft-RoCE (rxe) as my study platform. While pair-programming with an AI assistant during this learning, it flagged an integer overflow in mr_check_range(). I dug in, stood up a small reproducer, and -- believing the issue is real and worth fixing -- put together this small series. Thanks Gang Gang Yan (2): RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access DO-NOT-MERGE: selftest: add rxe mr_check_range() overflow reproducer drivers/infiniband/sw/rxe/rxe_mr.c | 3 +- tools/testing/selftests/rdma/Makefile | 8 +- tools/testing/selftests/rdma/config | 2 + .../testing/selftests/rdma/rxe_mr_overflow.c | 187 ++++++++++++++++++ .../testing/selftests/rdma/rxe_mr_overflow.sh | 132 +++++++++++++ 5 files changed, 330 insertions(+), 2 deletions(-) create mode 100644 tools/testing/selftests/rdma/rxe_mr_overflow.c create mode 100644 tools/testing/selftests/rdma/rxe_mr_overflow.sh -- 2.43.0