| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <OF2487FB9E.ECED277D-ON00258741.006BEF89-00258744.001FE4C0@ibm.com>
Date: Thu, 2 Sep 2021 05:48:21 +0000
From: "Milton Miller II" <miltonm@...ibm.com>
To: "Ivan Mikhaylov" <i.mikhaylov@...ro.com>
Cc: "David S . Miller" <davem@...emloft.net>,
"Jakub Kicinski" <kuba@...nel.org>,
"Samuel Mendoza-Jonas" <sam@...dozajonas.com>,
"Brad Ho" <Brad_Ho@...enix.com>,
"Paul Fertser" <fercerpav@...il.com>, openbmc@...ts.ozlabs.org,
linux-kernel@...r.kernel.org, netdev@...r.kernel.org,
devicetree@...r.kernel.org
Subject: Re: [PATCH 1/1] net/ncsi: add get MAC address command to get Intel i210
MAC address
On August 30, 2021, Ivan Mikhaylov" <i.mikhaylov@...ro.com> wrote:
>This patch adds OEM Intel GMA command and response handler for it.
>>>Signed-off-by: Brad Ho <Brad_Ho@...enix.com
>>Signed-off-by: Paul Fertser <fercerpav@...il.com>
>Signed-off-by: Ivan Mikhaylov <i.mikhaylov@...ro.com>
>---
> net/ncsi/internal.h | 3 +++
> net/ncsi/ncsi-manage.c | 25 ++++++++++++++++++++++++-
> net/ncsi/ncsi-pkt.h | 6 ++++++
> net/ncsi/ncsi-rsp.c | 42
>++++++++++++++++++++++++++++++++++++++++++
> 4 files changed, 75 insertions(+), 1 deletion(-)
>
>diff --git a/net/ncsi/internal.h b/net/ncsi/internal.h
>index 0b6cfd3b31e0..03757e76bb6b 100644
>--- a/net/ncsi/internal.h
>+++ b/net/ncsi/internal.h
>@@ -80,6 +80,7 @@ enum {
> #define NCSI_OEM_MFR_BCM_ID 0x113d
> #define NCSI_OEM_MFR_INTEL_ID 0x157
> /* Intel specific OEM command */
>+#define NCSI_OEM_INTEL_CMD_GMA 0x06 /* CMD ID for Get MAC
>*/
> #define NCSI_OEM_INTEL_CMD_KEEP_PHY 0x20 /* CMD ID for Keep
>PHY up */
> /* Broadcom specific OEM Command */
> #define NCSI_OEM_BCM_CMD_GMA 0x01 /* CMD ID for Get MAC
>*/
>@@ -89,6 +90,7 @@ enum {
> #define NCSI_OEM_MLX_CMD_SMAF 0x01 /* CMD ID for Set MC
>Affinity */
> #define NCSI_OEM_MLX_CMD_SMAF_PARAM 0x07 /* Parameter for SMAF
> */
> /* OEM Command payload lengths*/
>+#define NCSI_OEM_INTEL_CMD_GMA_LEN 5
> #define NCSI_OEM_INTEL_CMD_KEEP_PHY_LEN 7
> #define NCSI_OEM_BCM_CMD_GMA_LEN 12
> #define NCSI_OEM_MLX_CMD_GMA_LEN 8
>@@ -99,6 +101,7 @@ enum {
> /* Mac address offset in OEM response */
> #define BCM_MAC_ADDR_OFFSET 28
> #define MLX_MAC_ADDR_OFFSET 8
>+#define INTEL_MAC_ADDR_OFFSET 1
>
>
> struct ncsi_channel_version {
>diff --git a/net/ncsi/ncsi-manage.c b/net/ncsi/ncsi-manage.c
>index 89c7742cd72e..7121ce2a47c0 100644
>--- a/net/ncsi/ncsi-manage.c
>+++ b/net/ncsi/ncsi-manage.c
>@@ -795,13 +795,36 @@ static int ncsi_oem_smaf_mlx(struct
>ncsi_cmd_arg *nca)
> return ret;
> }
>
>+static int ncsi_oem_gma_handler_intel(struct ncsi_cmd_arg *nca)
>+{
>+ unsigned char data[NCSI_OEM_INTEL_CMD_GMA_LEN];
>+ int ret = 0;
>+
>+ nca->payload = NCSI_OEM_INTEL_CMD_GMA_LEN;
>+
>+ memset(data, 0, NCSI_OEM_INTEL_CMD_GMA_LEN);
>+ *(unsigned int *)data = ntohl((__force
>__be32)NCSI_OEM_MFR_INTEL_ID);
>+ data[4] = NCSI_OEM_INTEL_CMD_GMA;
>+
>+ nca->data = data;
>+
>+ ret = ncsi_xmit_cmd(nca);
>+ if (ret)
>+ netdev_err(nca->ndp->ndev.dev,
>+ "NCSI: Failed to transmit cmd 0x%x during configure\n",
>+ nca->type);
>+
>+ return ret;
>+}
>+
> /* OEM Command handlers initialization */
> static struct ncsi_oem_gma_handler {
> unsigned int mfr_id;
> int (*handler)(struct ncsi_cmd_arg *nca);
> } ncsi_oem_gma_handlers[] = {
> { NCSI_OEM_MFR_BCM_ID, ncsi_oem_gma_handler_bcm },
>- { NCSI_OEM_MFR_MLX_ID, ncsi_oem_gma_handler_mlx }
>+ { NCSI_OEM_MFR_MLX_ID, ncsi_oem_gma_handler_mlx },
>+ { NCSI_OEM_MFR_INTEL_ID, ncsi_oem_gma_handler_intel }
> };
>
> static int ncsi_gma_handler(struct ncsi_cmd_arg *nca, unsigned int
>mf_id)
>diff --git a/net/ncsi/ncsi-pkt.h b/net/ncsi/ncsi-pkt.h
>index 80938b338fee..ba66c7dc3a21 100644
>--- a/net/ncsi/ncsi-pkt.h
>+++ b/net/ncsi/ncsi-pkt.h
>@@ -178,6 +178,12 @@ struct ncsi_rsp_oem_bcm_pkt {
> unsigned char data[]; /* Cmd specific Data */
> };
>
>+/* Intel Response Data */
>+struct ncsi_rsp_oem_intel_pkt {
>+ unsigned char cmd; /* OEM Command ID */
>+ unsigned char data[]; /* Cmd specific Data */
>+};
>+
> /* Get Link Status */
> struct ncsi_rsp_gls_pkt {
> struct ncsi_rsp_pkt_hdr rsp; /* Response header */
>diff --git a/net/ncsi/ncsi-rsp.c b/net/ncsi/ncsi-rsp.c
>index d48374894817..6447a09932f5 100644
>--- a/net/ncsi/ncsi-rsp.c
>+++ b/net/ncsi/ncsi-rsp.c
>@@ -699,9 +699,51 @@ static int ncsi_rsp_handler_oem_bcm(struct
>ncsi_request *nr)
> return 0;
> }
>
>+/* Response handler for Intel command Get Mac Address */
>+static int ncsi_rsp_handler_oem_intel_gma(struct ncsi_request *nr)
>+{
>+ struct ncsi_dev_priv *ndp = nr->ndp;
>+ struct net_device *ndev = ndp->ndev.dev;
>+ const struct net_device_ops *ops = ndev->netdev_ops;
>+ struct ncsi_rsp_oem_pkt *rsp;
>+ struct sockaddr saddr;
>+ int ret = 0;
>+
>+ /* Get the response header */
>+ rsp = (struct ncsi_rsp_oem_pkt *)skb_network_header(nr->rsp);
>+
>+ saddr.sa_family = ndev->type;
>+ ndev->priv_flags |= IFF_LIVE_ADDR_CHANGE;
>+ memcpy(saddr.sa_data, &rsp->data[INTEL_MAC_ADDR_OFFSET], ETH_ALEN);
>+ /* Increase mac address by 1 for BMC's address */
>+ eth_addr_inc((u8 *)saddr.sa_data);
>+ if (!is_valid_ether_addr((const u8 *)saddr.sa_data))
>+ return -ENXIO;
The Intel GMA retireves the MAC address of the host, and the datasheet
anticipates the BMC will "share" the MAC by stealing specific TCP and
UDP port traffic destined to the host.
This "add one" allocation of the MAC is therefore a policy, and one that
is beyond the data sheet.
While this +1 policy may work for some OEM boards, there are other boards
where the MAC address assigned to the BMC does not follow this pattern,
but instead the MAC is stored in some platform dependent location obtained
in a platform specific manner.
I suggest this BMC = ether_addr_inc(GMA) be opt in via a device tree property.
The name of the property should be negotiated in the device tree mailing list,
as it appears it would be generic to more than one vendor.
Unfortunately, we missed this when we added the broadcom and mellanox handlers.
>+>+ /* Set the flag for GMA command which should only be called once */
>+ ndp->gma_flag = 1;
>+
>+ ret = ops->ndo_set_mac_address(ndev, &saddr);
>+ if (ret < 0)
>+ netdev_warn(ndev,
>+ "NCSI: 'Writing mac address to device failed\n");
>+
>+ return ret;
>+}
>+
> /* Response handler for Intel card */
> static int ncsi_rsp_handler_oem_intel(struct ncsi_request *nr)
> {
>+ struct ncsi_rsp_oem_intel_pkt *intel;
>+ struct ncsi_rsp_oem_pkt *rsp;
>+
>+ /* Get the response header */
>+ rsp = (struct ncsi_rsp_oem_pkt *)skb_network_header(nr->rsp);
>+ intel = (struct ncsi_rsp_oem_intel_pkt *)(rsp->data);
>+
>+ if (intel->cmd == NCSI_OEM_INTEL_CMD_GMA)
>+ return ncsi_rsp_handler_oem_intel_gma(nr);
>+
> return 0;
> }
>
>--
>2.31.1
>
>
Powered by blists - more mailing lists