Commit d55d87fd authored by Herbert Xu's avatar Herbert Xu Committed by David S. Miller
Browse files

net: Move rx skb_orphan call to where needed 



In order to get the tun driver to account packets, we need to be
able to receive packets with destructors set.  To be on the safe
side, I added an skb_orphan call for all protocols by default since
some of them (IP in particular) cannot handle receiving packets
destructors properly.

Now it seems that at least one protocol (CAN) expects to be able
to pass skb->sk through the rx path without getting clobbered.

So this patch attempts to fix this properly by moving the skb_orphan
call to where it's actually needed.  In particular, I've added it
to skb_set_owner_[rw] which is what most users of skb->destructor
call.

This is actually an improvement for tun too since it means that
we only give back the amount charged to the socket when the skb
is passed to another socket that will also be charged accordingly.

Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Tested-by: default avatarOliver Hartkopp <olver@hartkopp.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent d5fdd6ba

include/net/sctp/sctp.h

+1 −0
Original line number Diff line number Diff line
@@ -448,6 +448,7 @@ static inline void sctp_skb_set_owner_r(struct sk_buff *skb, struct sock *sk) 
{

	struct sctp_ulpevent *event = sctp_skb2event(skb);



	skb_orphan(skb);

	skb->sk = sk;

	skb->destructor = sctp_sock_rfree;

	atomic_add(event->rmem_len, &sk->sk_rmem_alloc);

include/net/sock.h

+2 −0
Original line number Diff line number Diff line
@@ -1250,6 +1250,7 @@ static inline int sk_has_allocations(const struct sock *sk) 


static inline void skb_set_owner_w(struct sk_buff *skb, struct sock *sk)

{

	skb_orphan(skb);

	skb->sk = sk;

	skb->destructor = sock_wfree;

	/*
@@ -1262,6 +1263,7 @@ static inline void skb_set_owner_w(struct sk_buff *skb, struct sock *sk) 


static inline void skb_set_owner_r(struct sk_buff *skb, struct sock *sk)

{

	skb_orphan(skb);

	skb->sk = sk;

	skb->destructor = sock_rfree;

	atomic_add(skb->truesize, &sk->sk_rmem_alloc);

net/ax25/ax25_in.c

+1 −2
Original line number Diff line number Diff line
@@ -437,8 +437,7 @@ free: 
int ax25_kiss_rcv(struct sk_buff *skb, struct net_device *dev,

		  struct packet_type *ptype, struct net_device *orig_dev)

{

	skb->sk = NULL;		/* Initially we don't know who it's for */

	skb->destructor = NULL;	/* Who initializes this, dammit?! */

	skb_orphan(skb);



	if (!net_eq(dev_net(dev), &init_net)) {

		kfree_skb(skb);

net/core/dev.c

+0 −2
Original line number Diff line number Diff line
@@ -2310,8 +2310,6 @@ ncls: 
	if (!skb)

		goto out;



	skb_orphan(skb);



	type = skb->protocol;

	list_for_each_entry_rcu(ptype,

			&ptype_base[ntohs(type) & PTYPE_HASH_MASK], list) {

net/irda/af_irda.c

+0 −3
Original line number Diff line number Diff line
@@ -913,9 +913,6 @@ static int irda_accept(struct socket *sock, struct socket *newsock, int flags) 
	/* Clean up the original one to keep it in listen state */

	irttp_listen(self->tsap);



	/* Wow ! What is that ? Jean II */

	skb->sk = NULL;

	skb->destructor = NULL;

	kfree_skb(skb);

	sk->sk_ack_backlog--;

CRA Git | Maintained and supported by SUSTech CRA and CCSE