netdev - [PATCH net-next 0/6] mlxsw: Two sampling fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20210329100948.355486-1-idosch@idosch.org>
Date:   Mon, 29 Mar 2021 13:09:42 +0300
From:   Ido Schimmel <idosch@...sch.org>
To:     netdev@...r.kernel.org
Cc:     davem@...emloft.net, kuba@...nel.org, jiri@...dia.com,
        mlxsw@...dia.com, Ido Schimmel <idosch@...dia.com>
Subject: [PATCH net-next 0/6] mlxsw: Two sampling fixes

From: Ido Schimmel <idosch@...dia.com>

This patchset fixes two bugs in recent sampling submissions.

The first fix, in patch #3, prevents matchall rules with sample action
to be added in front of flower rules on egress. Patches #1-#2 are
preparations meant at avoiding similar bugs in the future. Patch #4 is a
selftest.

The second fix, in patch #5, prevents sampling from being enabled on a
port if already enabled. Patch #6 is a selftest.

Ido Schimmel (6):
  mlxsw: spectrum_matchall: Perform protocol check earlier
  mlxsw: spectrum_matchall: Convert if statements to a switch statement
  mlxsw: spectrum_matchall: Perform priority checks earlier
  selftests: mlxsw: Test matchall failure with protocol match
  mlxsw: spectrum: Veto sampling if already enabled on port
  selftests: mlxsw: Test vetoing of double sampling

 .../net/ethernet/mellanox/mlxsw/spectrum.c    |  5 ++
 .../mellanox/mlxsw/spectrum_matchall.c        | 46 ++++++++++---------
 .../drivers/net/mlxsw/tc_restrictions.sh      | 17 +++++++
 .../selftests/drivers/net/mlxsw/tc_sample.sh  | 30 ++++++++++++
 4 files changed, 76 insertions(+), 22 deletions(-)

-- 
2.30.2