lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Thu, 2 Apr 2015 00:43:57 -0700
From:	Scott Feldman <sfeldma@...il.com>
To:	David Miller <davem@...emloft.net>
Cc:	Netdev <netdev@...r.kernel.org>,
	Jiří Pírko <jiri@...nulli.us>,
	Roopa Prabhu <roopa@...ulusnetworks.com>,
	Guenter Roeck <linux@...ck-us.net>,
	Florian Fainelli <f.fainelli@...il.com>,
	"Samudrala, Sridhar" <sridhar.samudrala@...el.com>,
	"Arad, Ronen" <ronen.arad@...el.com>
Subject: Re: [PATCH net-next v2 01/26] switchdev: introduce get/set attrs ops

On Wed, Apr 1, 2015 at 11:08 AM, David Miller <davem@...emloft.net> wrote:
> From: sfeldma@...il.com
> Date: Wed,  1 Apr 2015 03:07:37 -0700
>
>> +int swdev_port_attr_set(struct net_device *dev, struct swdev_attr *attr)
>> +{
>> +     struct swdev_attr prev = *attr;
>> +     int err, get_err, revert_err;
>> +
>> +     get_err = swdev_port_attr_get(dev, &prev);
>> +
>> +     err = __swdev_port_attr_set(dev, attr);
>> +     if (err && !get_err && !(attr->flags & SWDEV_F_NO_RECOVER)) {
>> +             /* Some err on set: revert to previous value */
>> +             revert_err = __swdev_port_attr_set(dev, &prev);
>> +             if (revert_err)
>> +                     netdev_err(dev, "Reverting swdev port attr %d failed\n",
>> +                                attr->id);
>> +     }
>> +
>> +     return err;
>
> This style of error recovery doesn't work.
>
> You have to have a prepare/commit model to do this sanely, because
> otherwise:
>
> 1) Partial state updates can be seen by the data plane (and other
>    code paths) that do not use RTNL mutex protection.
>
> 2) It is absoultely expected that if some resource allocation failed
>    when switching to the new attribute value, the same exactly thing
>    is extremely likely during the rollback.
>
> So you have to code this in a way that no partial state updates are
> ever visible, and also that rollbacks don't fail.

I'm sending v3 with a prepare/commit model, for attr sets and obj
adds.  The prepare phase asks driver(s) if set/add will work (is
supported and device resource is available).  If yes, then do commit
phase.   Commit could still fail due to failures outside the control
of the driver, like ENOMEM.  In that case, WARN and return err.

> I also agree with Jamal that you should use the netlink attribute
> values for these attributes rather than inventing yet another
> namespace of ID numbers.

That doesn't work.  The netlink ids are distributed across multiple
enum lists, so you'll inevitably have collisions in ID number.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists