News for hackers. Stuff that matters.
Re:Stop Memsetting Structures by v_lisivka on Saturday April 27, 2019 @06:00PM (#19767889)
RDMA (Infiniband) does DMA to/from network. Why we should not use RDMA?
Re:Stop Memsetting Structures by catern on Saturday April 27, 2019 @06:58PM (#19768153)
Hmm, that concern is not just limited to RDMA; any kind of shared memory communication across a trust boundary is vulnerable to info leaks in the padding of the struct. That does seem like a real issue.

Not sure what's the appropriate mitigation. Having to memset is a drag, and it's easy to forget to do it in some place or another. I'm tempted to say that you should only use packed structs for shared memory communication across trust boundaries.

Re:Stop Memsetting Structures by gmueckl on Sunday April 28, 2019 @06:47AM (#19770404)
Well, Infiniband is intended mainly for supercomputers. So security is of no real concern within the Imfiniband network as that is implicitly a trusted environment. Access comtrol to that network is the main security boundary.

Edit: Also, lots of simulation codes I am aware of tend to send flat arrays anyway. So I'd say that your concerns are mostly theoretical in nature.

Re:Stop Memsetting Structures by shaklee3 on Saturday April 27, 2019 @07:23PM (#19768262)
RDMA, both roce and infiniband have some significant limitations, specifically at higher rates. But they're the best we have right now for direct dma.