Re: [PATCH v3] RDMA/rxe: Fix out-of-range unsigned-to-signed conversion for RDMA message in 2GiB size

[Leon Romanovsky]

On Fri, 02 Oct 2026 22:22:50 +0800, Honggang LI wrote:
> When RDMA READ request for 2GiB in single WR, res->read.resid is u32
> 0x80000000, which is INT_MIN (-2147483648).
> 
>     payload = min_t(int, res->read.resid, mtu);
> 
> The `min_t` function will return -2147483648 for payload. The wrong
> size is propagated through call chain, `read_reply` -> `prepare_ack_packet`
> -> `rxe_init_packet` -> `alloc_skb` . `alloc_skb` failed because of
> invalid size. The passive side failed to emit response packet for RDMA
> READ request.
> 
> [...]

Applied, thanks!

[1/1] RDMA/rxe: Fix out-of-range unsigned-to-signed conversion for RDMA message in 2GiB size
      https://git.kernel.org/rdma/rdma/c/56a27df6cedd4f

Best regards,
-- 
Leon Romanovsky <leon@xxxxxxxxxx>