Commit 225aabaf authored by Or Gerlitz's avatar Or Gerlitz Committed by Saeed Mahameed
Browse files

net/mlx5e: Make sure the FW max encap size is enough for ipv6 tunnels 



Otherwise the code that fills the ipv6 encapsulation headers could be writing
beyond the allocated headers buffer.

Fixes: ce99f6b9 ('net/mlx5e: Support SRIOV TC encapsulation offloads for IPv6 tunnels')
Signed-off-by: default avatarOr Gerlitz <ogerlitz@mellanox.com>
Reviewed-by: default avatarRoi Dayan <roid@mellanox.com>
Signed-off-by: default avatarSaeed Mahameed <saeedm@mellanox.com>
parent 32f3671f

drivers/net/ethernet/mellanox/mlx5/core/en_tc.c

+23 −19
Original line number Diff line number Diff line
@@ -819,8 +819,8 @@ static void gen_vxlan_header_ipv4(struct net_device *out_dev, 
	vxh->vx_vni = vxlan_vni_field(vx_vni);

}



static int gen_vxlan_header_ipv6(struct net_device *out_dev,

				 char buf[],

static void gen_vxlan_header_ipv6(struct net_device *out_dev,

				  char buf[], int encap_size,

				  unsigned char h_dest[ETH_ALEN],

				  int ttl,

				  struct in6_addr *daddr,
@@ -828,7 +828,6 @@ static int gen_vxlan_header_ipv6(struct net_device *out_dev, 
				  __be16 udp_dst_port,

				  __be32 vx_vni)

{

	int encap_size = VXLAN_HLEN + sizeof(struct ipv6hdr) + ETH_HLEN;

	struct ethhdr *eth = (struct ethhdr *)buf;

	struct ipv6hdr *ip6h = (struct ipv6hdr *)((char *)eth + sizeof(struct ethhdr));

	struct udphdr *udp = (struct udphdr *)((char *)ip6h + sizeof(struct ipv6hdr));
@@ -850,8 +849,6 @@ static int gen_vxlan_header_ipv6(struct net_device *out_dev, 
	udp->dest = udp_dst_port;

	vxh->vx_flags = VXLAN_HF_VNI;

	vxh->vx_vni = vxlan_vni_field(vx_vni);



	return encap_size;

}



static int mlx5e_create_encap_header_ipv4(struct mlx5e_priv *priv,
@@ -935,13 +932,20 @@ static int mlx5e_create_encap_header_ipv6(struct mlx5e_priv *priv, 


{

	int max_encap_size = MLX5_CAP_ESW(priv->mdev, max_encap_header_size);

	int ipv6_encap_size = ETH_HLEN + sizeof(struct ipv6hdr) + VXLAN_HLEN;

	struct ip_tunnel_key *tun_key = &e->tun_info.key;

	int encap_size, err, ttl = 0;

	struct neighbour *n = NULL;

	struct flowi6 fl6 = {};

	char *encap_header;

	int err, ttl = 0;



	if (max_encap_size < ipv6_encap_size) {

		mlx5_core_warn(priv->mdev, "encap size %d too big, max supported is %d\n",

			       ipv6_encap_size, max_encap_size);

		return -EOPNOTSUPP;

	}



	encap_header = kzalloc(max_encap_size, GFP_KERNEL);

	encap_header = kzalloc(ipv6_encap_size, GFP_KERNEL);

	if (!encap_header)

		return -ENOMEM;
@@ -977,8 +981,8 @@ static int mlx5e_create_encap_header_ipv6(struct mlx5e_priv *priv, 


	switch (e->tunnel_type) {

	case MLX5_HEADER_TYPE_VXLAN:

		encap_size = gen_vxlan_header_ipv6(*out_dev, encap_header,

						   e->h_dest, ttl,

		gen_vxlan_header_ipv6(*out_dev, encap_header,

				      ipv6_encap_size, e->h_dest, ttl,

				      &fl6.daddr,

				      &fl6.saddr, tun_key->tp_dst,

				      tunnel_id_to_key32(tun_key->tun_id));
@@ -989,7 +993,7 @@ static int mlx5e_create_encap_header_ipv6(struct mlx5e_priv *priv, 
	}



	err = mlx5_encap_alloc(priv->mdev, e->tunnel_type,

			       encap_size, encap_header, &e->encap_id);

			       ipv6_encap_size, encap_header, &e->encap_id);

out:

	if (err && n)

		neigh_release(n);

CRA Git | Maintained and supported by SUSTech CRA and CCSE