Commit 047af9cf authored by Eric W. Biederman's avatar Eric W. Biederman Committed by David S. Miller

macvtap: Fix macvtap_open races in the zero copy enable code.

To see if it is appropriate to enable the macvtap zero copy feature
don't test the lowerdev network device flags.   Instead test the
macvtap network device flags which are a direct copy of the lowerdev
flags.  This is important because nothing holds a reference to lowerdev
and on a very bad day we lowerdev could be a pointer to stale memory.
Signed-off-by: default avatarEric W. Biederman <ebiederm@xmission.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 99f34b38
...@@ -343,7 +343,6 @@ static int macvtap_open(struct inode *inode, struct file *file) ...@@ -343,7 +343,6 @@ static int macvtap_open(struct inode *inode, struct file *file)
{ {
struct net *net = current->nsproxy->net_ns; struct net *net = current->nsproxy->net_ns;
struct net_device *dev = dev_get_by_index(net, iminor(inode)); struct net_device *dev = dev_get_by_index(net, iminor(inode));
struct macvlan_dev *vlan = netdev_priv(dev);
struct macvtap_queue *q; struct macvtap_queue *q;
int err; int err;
...@@ -376,12 +375,12 @@ static int macvtap_open(struct inode *inode, struct file *file) ...@@ -376,12 +375,12 @@ static int macvtap_open(struct inode *inode, struct file *file)
/* /*
* so far only KVM virtio_net uses macvtap, enable zero copy between * so far only KVM virtio_net uses macvtap, enable zero copy between
* guest kernel and host kernel when lower device supports zerocopy * guest kernel and host kernel when lower device supports zerocopy
*
* The macvlan supports zerocopy iff the lower device supports zero
* copy so we don't have to look at the lower device directly.
*/ */
if (vlan) { if ((dev->features & NETIF_F_HIGHDMA) && (dev->features & NETIF_F_SG))
if ((vlan->lowerdev->features & NETIF_F_HIGHDMA) && sock_set_flag(&q->sk, SOCK_ZEROCOPY);
(vlan->lowerdev->features & NETIF_F_SG))
sock_set_flag(&q->sk, SOCK_ZEROCOPY);
}
err = macvtap_set_queue(dev, file, q); err = macvtap_set_queue(dev, file, q);
if (err) if (err)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment