Commit 9a0fde996 for llama.cpp
commit 9a0fde9967fa1a35b6e5dd1f47e1a3648b6fecc1
Author: Katara <sohaib.harraoui@ostorlab.dev>
Date: Sat Oct 24 16:34:46 2026 +0100
rpc : add bounds check in rdma_recv (#30399)
diff --git a/ggml/src/ggml-rpc/transport.cpp b/ggml/src/ggml-rpc/transport.cpp
index 22b38e00f..d5670f34d 100644
--- a/ggml/src/ggml-rpc/transport.cpp
+++ b/ggml/src/ggml-rpc/transport.cpp
@@ -517,6 +517,11 @@ bool socket_t::impl::rdma_recv(void * data, size_t size) {
int slot = (int)wc.wr_id;
size_t got = wc.byte_len;
+ if (got > rem) {
+ LOG_ERROR("RDMA recv overrun: got=%zu rem=%zu\n", got, rem);
+ c->post_rx(slot);
+ return false;
+ }
memcpy(dst, c->rx_slot(slot), got);
if (!c->post_rx(slot)) return false;