Re: [PATCH net 0/2] RDMA/rxe: fix mr_check_range() iova overflow (OOB)

[Zhu Yanjun <yanjun.zhu@linux.dev>]

在 2026/7/28 2:11, Gang Yan 写道:
> From: Gang Yan <yangang@kylinos.cn>
>
> Hi, Maintainers
>
> I've recently started learning RDMA, using soft-RoCE (rxe) as my study
> platform. While pair-programming with an AI assistant during this learning,
> it flagged an integer overflow in mr_check_range(). I dug in, stood up a
> small reproducer, and -- believing the issue is real and worth fixing --
> put together this small series.

Do you have a small reproducer for this issue? If so, could you please 
share it on the RDMA mailing list?

I’d like to use it to reproduce the problem and confirm that this commit 
fixes the reported issue.

Thanks a lot.

Zhu Yanjun

>
> Thanks
> Gang
>
> Gang Yan (2):
>    RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB
>      access
>    DO-NOT-MERGE: selftest: add rxe mr_check_range() overflow reproducer
>
>   drivers/infiniband/sw/rxe/rxe_mr.c            |   3 +-
>   tools/testing/selftests/rdma/Makefile         |   8 +-
>   tools/testing/selftests/rdma/config           |   2 +
>   .../testing/selftests/rdma/rxe_mr_overflow.c  | 187 ++++++++++++++++++
>   .../testing/selftests/rdma/rxe_mr_overflow.sh | 132 +++++++++++++
>   5 files changed, 330 insertions(+), 2 deletions(-)
>   create mode 100644 tools/testing/selftests/rdma/rxe_mr_overflow.c
>   create mode 100644 tools/testing/selftests/rdma/rxe_mr_overflow.sh
>
-- 
Best Regards,
Yanjun.Zhu