kernel/linux.git/drivers/infiniband/core/iter.c, branch linux-7.1.yLinux kernel stable tree (mirror)https://git.radix-linux.su/kernel/linux.git/atom?h=linux-7.1.y2026-06-03T12:37:34+00:00RDMA/umem: Fix truncation for block sizes >= 4G2026-06-03T12:37:34+00:00Jason Gunthorpejgg@nvidia.com2026-06-01T16:52:31+00:00urn:sha1:15fe76e23615f502d051ef0768f86babaf08746c
When the iommu is used the linearization of the mapping can give a single
block that is very large split across multiple SG entries.
When __rdma_block_iter_next() reassembles the split SG entries it is
overflowing the 32 bit stack values and computed the wrong DMA addresses
for blocks after the truncation.
Use the right types to hold DMA addresses.
Link: https://patch.msgid.link/r/1-v1-88303e9e509f+f7-ib_umem_types_jgg@nvidia.com
Cc: stable@vger.kernel.org
Fixes: a808273a495c ("RDMA/verbs: Add a DMA iterator to return aligned contiguous memory blocks")
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
RDMA: Move DMA block iterator logic into dedicated files2026-02-25T13:15:30+00:00Leon Romanovskyleonro@nvidia.com2026-02-13T10:57:37+00:00urn:sha1:6094ea64c69520ed1e770e7c79c43412de202bfa
The DMA iterator logic was mixed into verbs and umem-specific code,
forcing all users to include rdma/ib_umem.h. Move the block iterator
logic into iter.c and rdma/iter.h so that rdma/ib_umem.h and
rdma/ib_verbs.h can be separated in a follow-up patch.
Link: https://patch.msgid.link/20260213-refactor-umem-v1-1-f3be85847922@nvidia.com
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>