Re: [PATCH v5 0/3] RDMA/srpt: fix the descriptor table checks and the context counters

[Leon Romanovsky]

On Sun, 25 Oct 2026 10:37:45 +0900, Yehyeong Lee wrote:
> The first two patches bound initiator supplied descriptor data, and the
> third widens the counters that hold what the first one admits.
> 
> A 510 entry table fits in the default 8276 byte IU when the additional CDB
> is empty, so the bound accepts it and the counters then have to hold it.
> With only the bound, a conforming command carrying 256 or more descriptors
> still wraps n_rw_ctx and leaks every context it allocated. With only the
> wider counters, a command that sets ADDITIONAL CDB LENGTH to its maximum
> still walks a descriptor table that runs past the receive buffer.
> 
> [...]

Applied, thanks!

[1/3] RDMA/srpt: bound the indirect descriptor table to the IU
      https://git.kernel.org/rdma/rdma/c/d5e2467b86d496
[2/3] RDMA/srpt: reject zero-length buffer descriptors
      https://git.kernel.org/rdma/rdma/c/f38458ac4ff689
[3/3] RDMA/srpt: widen the indirect RDMA context counters
      https://git.kernel.org/rdma/rdma/c/f9258be57e3e19

Best regards,
-- 
Leon Romanovsky <leon@xxxxxxxxxx>