lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 4 Dec 2014 12:17:24 -0800 From: Tom Herbert <therbert@...gle.com> To: Joe Stringer <joestringer@...ira.com> Cc: Linux Netdev List <netdev@...r.kernel.org>, LKML <linux-kernel@...r.kernel.org>, Jesse Gross <jesse@...ira.com>, Shannon Nelson <shannon.nelson@...el.com>, "Brandeburg, Jesse" <jesse.brandeburg@...el.com>, Jeff Kirsher <jeffrey.t.kirsher@...el.com>, "linux.nics" <linux.nics@...el.com> Subject: Re: [PATCHv3 net] i40e: Implement ndo_gso_check() On Thu, Dec 4, 2014 at 10:39 AM, Joe Stringer <joestringer@...ira.com> wrote: > ndo_gso_check() was recently introduced to allow NICs to report the > offloading support that they have on a per-skb basis. Add an > implementation for this driver which checks for IPIP, GRE, UDP tunnels. > > Signed-off-by: Joe Stringer <joestringer@...ira.com> > --- > v3: Drop IPIP and GRE (no driver support even though hw supports it). > Check for UDP outer protocol for UDP tunnels. > v2: Expand to include IP in IP and IPv4/IPv6 inside GRE/UDP tunnels. > Add MAX_INNER_LENGTH (as 80). > --- > drivers/net/ethernet/intel/i40e/i40e_main.c | 26 ++++++++++++++++++++++++++ > 1 file changed, 26 insertions(+) > > diff --git a/drivers/net/ethernet/intel/i40e/i40e_main.c b/drivers/net/ethernet/intel/i40e/i40e_main.c > index c3a7f4a..0d6493a 100644 > --- a/drivers/net/ethernet/intel/i40e/i40e_main.c > +++ b/drivers/net/ethernet/intel/i40e/i40e_main.c > @@ -7447,6 +7447,31 @@ static int i40e_ndo_fdb_dump(struct sk_buff *skb, > > #endif /* USE_DEFAULT_FDB_DEL_DUMP */ > #endif /* HAVE_FDB_OPS */ > +static bool i40e_gso_check(struct sk_buff *skb, struct net_device *dev) > +{ > + if (skb_shinfo(skb)->gso_type & SKB_GSO_UDP_TUNNEL) { > + unsigned char *ihdr; > + > + if (skb->protocol != IPPROTO_UDP || > + skb->inner_protocol_type != ENCAP_TYPE_ETHER) > + return false; > + > + if (skb->inner_protocol == htons(ETH_P_TEB)) > + ihdr = skb_inner_mac_header(skb); > + else if (skb->inner_protocol == htons(ETH_P_IP) || > + skb->inner_protocol == htons(ETH_P_IPV6)) > + ihdr = skb_inner_network_header(skb); > + else > + return false; > + Wow, this is getting complicated! :-( It's not clear that the protocol specific checks are needed here since it looks like the header length is being passed to the device later on. Also, I think we need skb_inner_mac_header(skb) - skb_transport_header(skb) to always work to give the length of the encapsulation headers (in case there is no real inner mac header, then that offset should be for the network header). So would a simple check like this work: if (skb->encapsulation && (skb_inner_mac_header(skb) - skb_transport_header(skb)) > MAX_TUNNEL_HDR_LEN) return false; > +#define MAX_TUNNEL_HDR_LEN 80 > + if (ihdr - skb_transport_header(skb) > MAX_TUNNEL_HDR_LEN) > + return false; > + } > + > + return true; > +} > + > static const struct net_device_ops i40e_netdev_ops = { > .ndo_open = i40e_open, > .ndo_stop = i40e_close, > @@ -7487,6 +7512,7 @@ static const struct net_device_ops i40e_netdev_ops = { > .ndo_fdb_dump = i40e_ndo_fdb_dump, > #endif > #endif > + .ndo_gso_check = i40e_gso_check, > }; > > /** > -- > 1.7.10.4 > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists