1. 14 May, 2021 29 commits
  2. 13 May, 2021 11 commits
    • Gustavo A. R. Silva's avatar
      net: mana: Use struct_size() in kzalloc() · ea89c862
      Gustavo A. R. Silva authored
      Make use of the struct_size() helper instead of an open-coded version,
      in order to avoid any potential type mistakes or integer overflows
      that, in the worst scenario, could lead to heap overflows.
      
      This code was detected with the help of Coccinelle and, audited and
      fixed manually.
      Signed-off-by: default avatarGustavo A. R. Silva <gustavoars@kernel.org>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      ea89c862
    • Gustavo A. R. Silva's avatar
      bpf: Use struct_size() in kzalloc() · fe0bdaec
      Gustavo A. R. Silva authored
      Make use of the struct_size() helper instead of an open-coded version,
      in order to avoid any potential type mistakes or integer overflows
      that, in the worst scenario, could lead to heap overflows.
      
      This code was detected with the help of Coccinelle and, audited and
      fixed manually.
      Signed-off-by: default avatarGustavo A. R. Silva <gustavoars@kernel.org>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      fe0bdaec
    • Guenter Roeck's avatar
      net: caif: Drop unnecessary NULL check after container_of · 0f3ee280
      Guenter Roeck authored
      The first parameter passed to chnl_recv_cb() can never be NULL since all
      callers dereferenced it. Consequently, container_of() on it is also never
      NULL, even though the reference into the structure points to the first
      element of the structure. The NULL check is therefore unnecessary.
      On top of that, it is misleading to perform a NULL check on the result of
      container_of() because the position of the contained element could change,
      which would make the test invalid. Remove the unnecessary NULL check.
      
      This change was made automatically with the following Coccinelle script.
      
      @@
      type t;
      identifier v;
      statement s;
      @@
      
      <+...
      (
        t v = container_of(...);
      |
        v = container_of(...);
      )
        ...
        when != v
      - if (\( !v \| v == NULL \) ) s
      ...+>
      Signed-off-by: default avatarGuenter Roeck <linux@roeck-us.net>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      0f3ee280
    • Colin Ian King's avatar
      net: qed: remove redundant initialization of variable rc · 5efe2575
      Colin Ian King authored
      The variable rc is being initialized with a value that is never read,
      it is being updated later on.  The assignment is redundant and can be
      removed.
      
      Addresses-Coverity: ("Unused value")
      Signed-off-by: default avatarColin Ian King <colin.king@canonical.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      5efe2575
    • David S. Miller's avatar
      Merge branch 'virtio_net-fixes' · 25e248a2
      David S. Miller authored
      Xuan Zhuo says:
      
      ====================
      virtio-net: fix for build_skb()
      
      The logic of this piece is really messy. Fortunately, my refactored patch can be
      completed with a small amount of testing.
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      25e248a2
    • Xuan Zhuo's avatar
      virtio-net: get build_skb() buf by data ptr · 7bf64460
      Xuan Zhuo authored
      In the case of merge, the page passed into page_to_skb() may be a head
      page, not the page where the current data is located. So when trying to
      get the buf where the data is located, you should directly use the
      pointer(p) to get the address corresponding to the page.
      
      At the same time, the offset of the data in the page should also be
      obtained using offset_in_page().
      
      This patch solves this problem. But if you don’t use this patch, the
      original code can also run, because if the page is not the page of the
      current data, the calculated tailroom will be less than 0, and will not
      enter the logic of build_skb() . The significance of this patch is to
      modify this logical problem, allowing more situations to use
      build_skb().
      Signed-off-by: default avatarXuan Zhuo <xuanzhuo@linux.alibaba.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      7bf64460
    • Xuan Zhuo's avatar
      virtio-net: fix for unable to handle page fault for address · 6c66c147
      Xuan Zhuo authored
      In merge mode, when xdp is enabled, if the headroom of buf is smaller
      than virtnet_get_headroom(), xdp_linearize_page() will be called but the
      variable of "headroom" is still 0, which leads to wrong logic after
      entering page_to_skb().
      
      [   16.600944] BUG: unable to handle page fault for address: ffffecbfff7b43c8[   16.602175] #PF: supervisor read access in kernel mode
      [   16.603350] #PF: error_code(0x0000) - not-present page
      [   16.604200] PGD 0 P4D 0
      [   16.604686] Oops: 0000 [#1] SMP PTI
      [   16.605306] CPU: 4 PID: 715 Comm: sh Tainted: G    B             5.12.0+ #312
      [   16.606429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/04
      [   16.608217] RIP: 0010:unmap_page_range+0x947/0xde0
      [   16.609014] Code: 00 00 08 00 48 83 f8 01 45 19 e4 41 f7 d4 41 83 e4 03 e9 a4 fd ff ff e8 b7 63 ed ff 4c 89 e0 48 c1 e0 065
      [   16.611863] RSP: 0018:ffffc90002503c58 EFLAGS: 00010286
      [   16.612720] RAX: ffffecbfff7b43c0 RBX: 00007f19f7203000 RCX: ffffffff812ff359
      [   16.613853] RDX: ffff888107778000 RSI: 0000000000000000 RDI: 0000000000000005
      [   16.614976] RBP: ffffea000425e000 R08: 0000000000000000 R09: 3030303030303030
      [   16.616124] R10: ffffffff82ed7d94 R11: 6637303030302052 R12: 7c00000afffded0f
      [   16.617276] R13: 0000000000000001 R14: ffff888119ee7010 R15: 00007f19f7202000
      [   16.618423] FS:  0000000000000000(0000) GS:ffff88842fd00000(0000) knlGS:0000000000000000
      [   16.619738] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [   16.620670] CR2: ffffecbfff7b43c8 CR3: 0000000103220005 CR4: 0000000000370ee0
      [   16.621792] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
      [   16.622920] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
      [   16.624047] Call Trace:
      [   16.624525]  ? release_pages+0x24d/0x730
      [   16.625209]  unmap_single_vma+0xa9/0x130
      [   16.625885]  unmap_vmas+0x76/0xf0
      [   16.626480]  exit_mmap+0xa0/0x210
      [   16.627129]  mmput+0x67/0x180
      [   16.627673]  do_exit+0x3d1/0xf10
      [   16.628259]  ? do_user_addr_fault+0x231/0x840
      [   16.629000]  do_group_exit+0x53/0xd0
      [   16.629631]  __x64_sys_exit_group+0x1d/0x20
      [   16.630354]  do_syscall_64+0x3c/0x80
      [   16.630988]  entry_SYSCALL_64_after_hwframe+0x44/0xae
      [   16.631828] RIP: 0033:0x7f1a043d0191
      [   16.632464] Code: Unable to access opcode bytes at RIP 0x7f1a043d0167.
      [   16.633502] RSP: 002b:00007ffe3d993308 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
      [   16.634737] RAX: ffffffffffffffda RBX: 00007f1a044c9490 RCX: 00007f1a043d0191
      [   16.635857] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
      [   16.636986] RBP: 0000000000000000 R08: ffffffffffffff88 R09: 0000000000000001
      [   16.638120] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f1a044c9490
      [   16.639245] R13: 0000000000000001 R14: 00007f1a044c9968 R15: 0000000000000000
      [   16.640408] Modules linked in:
      [   16.640958] CR2: ffffecbfff7b43c8
      [   16.641557] ---[ end trace bc4891c6ce46354c ]---
      [   16.642335] RIP: 0010:unmap_page_range+0x947/0xde0
      [   16.643135] Code: 00 00 08 00 48 83 f8 01 45 19 e4 41 f7 d4 41 83 e4 03 e9 a4 fd ff ff e8 b7 63 ed ff 4c 89 e0 48 c1 e0 065
      [   16.645983] RSP: 0018:ffffc90002503c58 EFLAGS: 00010286
      [   16.646845] RAX: ffffecbfff7b43c0 RBX: 00007f19f7203000 RCX: ffffffff812ff359
      [   16.647970] RDX: ffff888107778000 RSI: 0000000000000000 RDI: 0000000000000005
      [   16.649091] RBP: ffffea000425e000 R08: 0000000000000000 R09: 3030303030303030
      [   16.650250] R10: ffffffff82ed7d94 R11: 6637303030302052 R12: 7c00000afffded0f
      [   16.651394] R13: 0000000000000001 R14: ffff888119ee7010 R15: 00007f19f7202000
      [   16.652529] FS:  0000000000000000(0000) GS:ffff88842fd00000(0000) knlGS:0000000000000000
      [   16.653887] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [   16.654841] CR2: ffffecbfff7b43c8 CR3: 0000000103220005 CR4: 0000000000370ee0
      [   16.655992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
      [   16.657150] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
      [   16.658290] Kernel panic - not syncing: Fatal exception
      [   16.659613] Kernel Offset: disabled
      [   16.660234] ---[ end Kernel panic - not syncing: Fatal exception ]---
      
      Fixes: fb32856b ("virtio-net: page_to_skb() use build_skb when there's sufficient tailroom")
      Signed-off-by: default avatarXuan Zhuo <xuanzhuo@linux.alibaba.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      6c66c147
    • David S. Miller's avatar
      Merge branch 'atl1c-support-for-Mikrotik-10-25G-NIC-features' · 33b31426
      David S. Miller authored
      Gatis Peisenieks says:
      
      ====================
      atl1c: support for Mikrotik 10/25G NIC features
      
      The new Mikrotik 10/25G NIC maintains compatibility with existing atl1c
      driver. However it does have new features.
      
      This patch set adds support for reporting cards higher link speed, max-mtu,
      enables rx csum offload and improves tx performance.
      
      v2:
          - fixed xmit_more handling as pointed out by Eric Dumazet
          - added a more reliable link detection on Mikrotik 10/25G NIC
            since MDIO op emulation can occasionally fail
      Guangbin Huang says:
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      33b31426
    • Gatis Peisenieks's avatar
      atl1c: improve link detection reliability on Mikrotik 10/25G NIC · ea0fbd05
      Gatis Peisenieks authored
      Mikrotik 10/25G NIC emulates the MDIO accesses, but the emulation is
      not 100% reliable - the MDIO ops occasionally can timeout.
      
      This adds a reliable way of detecting link on Mikrotik 10/25G NIC.
      Signed-off-by: default avatarGatis Peisenieks <gatis@mikrotik.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      ea0fbd05
    • Gatis Peisenieks's avatar
      atl1c: enable rx csum offload on Mikrotik 10/25G NIC · b0390009
      Gatis Peisenieks authored
      Mikrotik 10/25G NIC supports hw checksum verification on rx for
      IP/IPv6 + TCP/UDP packets. HW checksum offload helps reduce host
      cpu load.
      
      This enables the csum offload specifically for Mikrotik 10/25G NIC
      as other HW supported by the driver is known to have problems with it.
      
      TCP iperf3 to Threadripper 3960X with NIC improved 16.5 -> 20.0 Gbps
      with mtu=1500.
      Signed-off-by: default avatarGatis Peisenieks <gatis@mikrotik.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      b0390009
    • Gatis Peisenieks's avatar
      atl1c: adjust max mtu according to Mikrotik 10/25G NIC ability · 545fa3fb
      Gatis Peisenieks authored
      The new Mikrotik 10/25G NIC supports jumbo frames. Jumbo frames are
      supported for TSO as well.
      
      This enables the support for mtu up to 9500 bytes.
      Signed-off-by: default avatarGatis Peisenieks <gatis@mikrotik.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      545fa3fb