{"id":810999,"url":"http://patchwork.ozlabs.org/api/covers/810999/?format=json","web_url":"http://patchwork.ozlabs.org/project/netdev/cover/150478756604.28665.6915020425359475729.stgit@firesoul/","project":{"id":7,"url":"http://patchwork.ozlabs.org/api/projects/7/?format=json","name":"Linux network development","link_name":"netdev","list_id":"netdev.vger.kernel.org","list_email":"netdev@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<150478756604.28665.6915020425359475729.stgit@firesoul>","list_archive_url":null,"date":"2017-09-07T12:33:08","name":"[V2,net-next,0/2] Fixes for XDP_REDIRECT map","submitter":{"id":13625,"url":"http://patchwork.ozlabs.org/api/people/13625/?format=json","name":"Jesper Dangaard Brouer","email":"brouer@redhat.com"},"mbox":"http://patchwork.ozlabs.org/project/netdev/cover/150478756604.28665.6915020425359475729.stgit@firesoul/mbox/","series":[{"id":1995,"url":"http://patchwork.ozlabs.org/api/series/1995/?format=json","web_url":"http://patchwork.ozlabs.org/project/netdev/list/?series=1995","date":"2017-09-07T12:33:08","name":"Fixes for XDP_REDIRECT map","version":2,"mbox":"http://patchwork.ozlabs.org/series/1995/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/810999/comments/","headers":{"Return-Path":"","X-Original-To":"patchwork-incoming@ozlabs.org","Delivered-To":"patchwork-incoming@ozlabs.org","Authentication-Results":["ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netdev-owner@vger.kernel.org;\n\treceiver=)","ext-mx03.extmail.prod.ext.phx2.redhat.com;\n\tdmarc=none (p=none dis=none) header.from=redhat.com","ext-mx03.extmail.prod.ext.phx2.redhat.com;\n\tspf=fail smtp.mailfrom=brouer@redhat.com"],"Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xp0Gz3Vwsz9s81\n\tfor ;\n\tThu, 7 Sep 2017 22:33:15 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1755114AbdIGMdM (ORCPT );\n\tThu, 7 Sep 2017 08:33:12 -0400","from mx1.redhat.com ([209.132.183.28]:56074 \"EHLO mx1.redhat.com\"\n\trhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP\n\tid S1754964AbdIGMdL (ORCPT );\n\tThu, 7 Sep 2017 08:33:11 -0400","from smtp.corp.redhat.com\n\t(int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby mx1.redhat.com (Postfix) with ESMTPS id AE11D7E423;\n\tThu, 7 Sep 2017 12:33:11 +0000 (UTC)","from firesoul.localdomain (ovpn-200-42.brq.redhat.com\n\t[10.40.200.42])\n\tby smtp.corp.redhat.com (Postfix) with ESMTP id 543C45D6A3;\n\tThu, 7 Sep 2017 12:33:09 +0000 (UTC)","from [192.168.5.1] (localhost [IPv6:::1])\n\tby firesoul.localdomain (Postfix) with ESMTP id 1781B3073EC87;\n\tThu, 7 Sep 2017 14:33:08 +0200 (CEST)"],"DMARC-Filter":"OpenDMARC Filter v1.3.2 mx1.redhat.com AE11D7E423","Subject":"[V2 PATCH net-next 0/2] Fixes for XDP_REDIRECT map","From":"Jesper Dangaard Brouer ","To":"netdev@vger.kernel.org, \"David S. Miller\" ","Cc":"Daniel Borkmann ,\n\tJohn Fastabend ,\n\tAndy Gospodarek ,\n\tJesper Dangaard Brouer ","Date":"Thu, 07 Sep 2017 14:33:08 +0200","Message-ID":"<150478756604.28665.6915020425359475729.stgit@firesoul>","User-Agent":"StGit/0.17.1-dirty","MIME-Version":"1.0","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"7bit","X-Scanned-By":"MIMEDefang 2.79 on 10.5.11.15","X-Greylist":"Sender IP whitelisted, not delayed by milter-greylist-4.5.16\n\t(mx1.redhat.com [10.5.110.27]);\n\tThu, 07 Sep 2017 12:33:11 +0000 (UTC)","Sender":"netdev-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netdev@vger.kernel.org"},"content":"This my V2 of catching XDP_REDIRECT and bpf_redirect_map() API usage\nthat can potentially crash the kernel. Addressed Daniels feedback in\npatch01, and added patch02 which catch and cleanup dangling map\npointers.\n\nI know John and Daniel are working on a more long-term solution, of\nrecording the bpf_prog pointer together with the map pointer. I just\nwanted to propose these fixes as a stop-gap to the potential crashes.\n\n---\n\nJesper Dangaard Brouer (2):\n xdp: implement xdp_redirect_map for generic XDP\n xdp: catch invalid XDP_REDIRECT API usage\n\n\n include/linux/filter.h | 1 +\n include/trace/events/xdp.h | 4 ++--\n net/core/dev.c | 3 +++\n net/core/filter.c | 39 ++++++++++++++++++++++++++++++++++++---\n 4 files changed, 42 insertions(+), 5 deletions(-)\n\n--"}