Re: [PATCH] RDMA/mad: Reject receive completions shorter than GRH

[Leon Romanovsky]

On Sat, 26 Sep 2026 18:59:25 +0800, Jiale Yao wrote:
> ib_mad_recv_done() derives the OPA MAD length by subtracting the GRH
> size from wc->byte_len without ensuring the receive completion covers
> the GRH. If it is shorter, the subtraction wraps before the result is
> stored in mad_len and an invalid length can be passed downstream.
> 
> Reject receive completions shorter than the GRH before inspecting the
> MAD header or deriving the MAD length.
> 
> [...]

Applied, thanks!

[1/1] RDMA/mad: Reject receive completions shorter than GRH
      https://git.kernel.org/rdma/rdma/c/2dc2126e690203

Best regards,
-- 
Leon Romanovsky <leon@xxxxxxxxxx>