On 3/23/23 10:18 PM, Jason Gunthorpe wrote: > On Thu, Mar 23, 2023 at 10:10:25PM +0800, Cheng Xu wrote: >> >> <...> >> >> Malicious doorbell will corrupt the head pointer in QPC, and then invalid WQEs >> will be processed. My point is that WQE validation can correct the head pointer >> carried in malicious doorbell, and can prevent such attack. > > No, if the head pointer is incorrect an attack can stall the QP by > guessing a head pointer that is valid but before already submitted > WQEs. You are right. Thanks very much for this discussion and your advisement. Cheng Xu > > There is no WQE based recovery for such a thing. > > Jason