diff options
author | Yan Zhai <yan@cloudflare.com> | 2023-08-18 05:58:14 +0300 |
---|---|---|
committer | Daniel Borkmann <daniel@iogearbox.net> | 2023-08-18 17:05:26 +0300 |
commit | a171fbec88a2c730b108c7147ac5e7b2f5a02b47 (patch) | |
tree | c6f4a953627411c1edf0832e135720e7ef5122ed /net/ncsi/ncsi-cmd.c | |
parent | 29b22badb7a84b783e3a4fffca16f7768fb31205 (diff) | |
download | linux-a171fbec88a2c730b108c7147ac5e7b2f5a02b47.tar.xz |
lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
LWTUNNEL_XMIT_CONTINUE is implicitly assumed in ip(6)_finish_output2,
such that any positive return value from a xmit hook could cause
unexpected continue behavior, despite that related skb may have been
freed. This could be error-prone for future xmit hook ops. One of the
possible errors is to return statuses of dst_output directly.
To make the code safer, redefine LWTUNNEL_XMIT_CONTINUE value to
distinguish from dst_output statuses and check the continue
condition explicitly.
Fixes: 3a0af8fd61f9 ("bpf: BPF for lightweight tunnel infrastructure")
Suggested-by: Dan Carpenter <dan.carpenter@linaro.org>
Signed-off-by: Yan Zhai <yan@cloudflare.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/96b939b85eda00e8df4f7c080f770970a4c5f698.1692326837.git.yan@cloudflare.com
Diffstat (limited to 'net/ncsi/ncsi-cmd.c')
0 files changed, 0 insertions, 0 deletions