Claude review: drm/i915/gvt: validate LRCA-derived guest context range

[Claude Code Review Bot <claude-review@example.com>]

Overall Series Review

Subject: drm/i915/gvt: validate LRCA-derived guest context range
Author: Nikita Zhandarovich <n.zhandarovich@fintech.ru>
Patches: 1
Reviewed: 2026-06-04T16:31:02.106355

---

This is a single-patch series that adds an early validation check for the LRCA (Logical Ring Context Address) field in guest-submitted execlist context descriptors within the i915 GVT (GPU virtualization) scheduler. The fix addresses a real issue: a malicious or buggy guest VM can supply an `lrca` value close to the top of the 20-bit page range (e.g., `0xFFFFE`), causing `lrca + page_index` to overflow the 32-bit GMA (Graphics Memory Address) space when shifted by `I915_GTT_PAGE_SHIFT` (12). The overflow would cause silent address truncation before the `intel_vgpu_gma_to_gpa()` translation, potentially leading to incorrect GPA lookups.

The approach is sound: validate once at workload creation time, before any GPA translation is attempted, and reject invalid descriptors with `EINVAL`. The new `intel_vgpu_context_page_num()` helper also centralizes the Broadwell RCS0 workaround for the context page count, which is duplicated inline in `populate_shadow_context()` and `update_guest_context()`.

**Verdict: The patch is correct and addresses a legitimate security/robustness concern. Minor suggestions below.**

---
Generated by Claude Code Patch Reviewer