linux-kernel - Re: [PATCH net v2] gve: ignore nonrelevant GSO type bits when processing TSO headers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CANn89iLy1qGXzrv_coRcaRDOrOMHKb-NG1xn06Sat0QTvrDwXA@mail.gmail.com>
Date: Fri, 7 Jun 2024 08:35:30 +0200
From: Eric Dumazet <edumazet@...gle.com>
To: joshwash@...gle.com
Cc: netdev@...r.kernel.org, davem@...emloft.net, kuba@...nel.org, 
	stable@...nel.org, Praveen Kaligineedi <pkaligineedi@...gle.com>, 
	Harshitha Ramamurthy <hramamurthy@...gle.com>, Willem de Bruijn <willemb@...gle.com>, 
	Andrei Vagin <avagin@...il.com>, Jeroen de Borst <jeroendb@...gle.com>, 
	Shailend Chand <shailend@...gle.com>, Paolo Abeni <pabeni@...hat.com>, 
	Rushil Gupta <rushilg@...gle.com>, Bailey Forrest <bcf@...gle.com>, 
	Catherine Sullivan <csully@...gle.com>, open list <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH net v2] gve: ignore nonrelevant GSO type bits when
 processing TSO headers

On Fri, Jun 7, 2024 at 8:10 AM <joshwash@...gle.com> wrote:
>
> From: Joshua Washington <joshwash@...gle.com>
>
> TSO currently fails when the skb's gso_type field has more than one bit
> set.
>
> TSO packets can be passed from userspace using PF_PACKET, TUNTAP and a
> few others, using virtio_net_hdr (e.g., PACKET_VNET_HDR). This includes
> virtualization, such as QEMU, a real use-case.
>
> The gso_type and gso_size fields as passed from userspace in
> virtio_net_hdr are not trusted blindly by the kernel. It adds gso_type
> |= SKB_GSO_DODGY to force the packet to enter the software GSO stack
> for verification.
>
> This issue might similarly come up when the CWR bit is set in the TCP
> header for congestion control, causing the SKB_GSO_TCP_ECN gso_type bit
> to be set.
>
> Fixes: a57e5de476be ("gve: DQO: Add TX path")
> Signed-off-by: Joshua Washington <joshwash@...gle.com>
> Reviewed-by: Praveen Kaligineedi <pkaligineedi@...gle.com>
> Reviewed-by: Harshitha Ramamurthy <hramamurthy@...gle.com>
> Reviewed-by: Willem de Bruijn <willemb@...gle.com>
> Suggested-by: Eric Dumazet <edumazet@...gle.com>
> Acked-by: Andrei Vagin <avagin@...il.com>

Reviewed-by: Eric Dumazet <edumazet@...gle.com>