From: Kevin Traynor <ktraynor@redhat.com> To: Michael Baum <michaelba@nvidia.com> Cc: Matan Azrad <matan@nvidia.com>, dpdk stable <stable@dpdk.org> Subject: patch 'net/mlx5: restrict Rx queue array access to boundary' has been queued to stable release 21.11.2 Date: Tue, 10 May 2022 13:29:52 +0100 Message-ID: <20220510123010.159523-15-ktraynor@redhat.com> (raw) In-Reply-To: <20220510123010.159523-1-ktraynor@redhat.com> Hi, FYI, your patch has been queued to stable release 21.11.2 Note it hasn't been pushed to http://dpdk.org/browse/dpdk-stable yet. It will be pushed if I get no objections before 05/15/22. So please shout if anyone has objections. Also note that after the patch there's a diff of the upstream commit vs the patch applied to the branch. This will indicate if there was any rebasing needed to apply to the stable branch. If there were code changes for rebasing (ie: not only metadata diffs), please double check that the rebase was correctly done. Queued patches are on a temporary branch at: https://github.com/kevintraynor/dpdk-stable This queued commit can be viewed at: https://github.com/kevintraynor/dpdk-stable/commit/b3896dba13eae6b410733af101a80b403a474416 Thanks. Kevin --- From b3896dba13eae6b410733af101a80b403a474416 Mon Sep 17 00:00:00 2001 From: Michael Baum <michaelba@nvidia.com> Date: Sun, 10 Apr 2022 12:25:27 +0300 Subject: [PATCH] net/mlx5: restrict Rx queue array access to boundary [ upstream commit 1573b07284caf92cad5479b539213c508d5583a6 ] The mlx5_rxq_get() function gets RxQ index and return RxQ priv accordingly. When it gets an invalid index, it accesses out of array bounds which might cause undefined behavior. This patch adds a check for invalid indexes before accessing to array. Fixes: 0cedf34da78f ("net/mlx5: move Rx queue reference count") Signed-off-by: Michael Baum <michaelba@nvidia.com> Acked-by: Matan Azrad <matan@nvidia.com> --- drivers/net/mlx5/mlx5_rxq.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/net/mlx5/mlx5_rxq.c b/drivers/net/mlx5/mlx5_rxq.c index fe72cf49d3..a5a96c9a60 100644 --- a/drivers/net/mlx5/mlx5_rxq.c +++ b/drivers/net/mlx5/mlx5_rxq.c @@ -2049,4 +2049,6 @@ mlx5_rxq_get(struct rte_eth_dev *dev, uint16_t idx) struct mlx5_priv *priv = dev->data->dev_private; + if (idx >= priv->rxqs_n) + return NULL; MLX5_ASSERT(priv->rxq_privs != NULL); return (*priv->rxq_privs)[idx]; -- 2.34.1 --- Diff of the applied patch vs upstream commit (please double-check if non-empty: --- --- - 2022-05-10 13:24:22.024999526 +0100 +++ 0015-net-mlx5-restrict-Rx-queue-array-access-to-boundary.patch 2022-05-10 13:24:21.590646343 +0100 @@ -1 +1 @@ -From 1573b07284caf92cad5479b539213c508d5583a6 Mon Sep 17 00:00:00 2001 +From b3896dba13eae6b410733af101a80b403a474416 Mon Sep 17 00:00:00 2001 @@ -5,0 +6,2 @@ +[ upstream commit 1573b07284caf92cad5479b539213c508d5583a6 ] + @@ -15 +16,0 @@ -Cc: stable@dpdk.org @@ -24 +25 @@ -index 925544ae3d..38fde939e1 100644 +index fe72cf49d3..a5a96c9a60 100644 @@ -27 +28 @@ -@@ -2050,4 +2050,6 @@ mlx5_rxq_get(struct rte_eth_dev *dev, uint16_t idx) +@@ -2049,4 +2049,6 @@ mlx5_rxq_get(struct rte_eth_dev *dev, uint16_t idx)
next prev parent reply other threads:[~2022-05-10 12:30 UTC|newest] Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top 2022-05-10 12:29 patch 'eal/windows: add missing C++ include guards' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/dpaa2: fix dpdmux default interface' " Kevin Traynor 2022-05-10 12:29 ` patch 'examples/bond: fix invalid use of trylock' " Kevin Traynor 2022-05-10 12:29 ` patch 'test/bpf: skip test if libpcap is unavailable' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/ice: improve performance of Rx timestamp offload' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/i40e: populate error in flow director parser' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/ice: add missing Tx burst mode name' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/ice: refactor parser usage' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/ice: fix raw flow input pattern parsing' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/netvsc: fix calculation of checksums based on mbuf flag' " Kevin Traynor 2022-05-10 12:29 ` patch 'common/mlx5: fix memory region range calculation' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/mlx5: fix Tx when inlining is impossible' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/mlx5: fix probing with secondary bonding member' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/mlx5: fix counter in non-termination meter' " Kevin Traynor 2022-05-10 12:29 ` Kevin Traynor [this message] 2022-05-10 12:29 ` patch 'net/mlx5: fix GTP handling in header modify action' " Kevin Traynor 2022-05-10 12:29 ` patch 'net/mlx5: fix Rx/Tx stats concurrency' " Kevin Traynor 2022-05-10 12:29 ` patch 'test/table: fix buffer overflow on lpm entry' " Kevin Traynor 2022-05-10 12:29 ` patch 'mem: skip attaching external memory in secondary process' " Kevin Traynor 2022-05-10 12:29 ` patch 'malloc: fix ASan handling for unmapped memory' " Kevin Traynor 2022-05-10 12:29 ` patch 'eal: fix C++ include for device event and DMA' " Kevin Traynor 2022-05-10 12:29 ` patch 'crypto/dpaa_sec: fix digest size' " Kevin Traynor 2022-05-10 12:30 ` patch 'security: fix SA lifetime comments' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/mlx5: fix login cleanup' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa2_sec: fix fle buffer leak' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa2_sec: fix buffer pool ID check' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa_sec: fix chained FD length in raw datapath' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa2_sec: " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa_sec: fix secondary process probing' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa2_sec: fix crypto operation pointer' " Kevin Traynor 2022-05-10 12:30 ` patch 'crypto/dpaa2_sec: fix operation status for simple FD' " Kevin Traynor 2022-05-10 12:30 ` patch 'common/dpaax: fix short MAC-I IV calculation for ZUC' " Kevin Traynor 2022-05-10 12:30 ` patch 'examples/l2fwd-crypto: fix stats refresh rate' " Kevin Traynor
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20220510123010.159523-15-ktraynor@redhat.com \ --to=ktraynor@redhat.com \ --cc=matan@nvidia.com \ --cc=michaelba@nvidia.com \ --cc=stable@dpdk.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
patches for DPDK stable branches This inbox may be cloned and mirrored by anyone: git clone --mirror http://inbox.dpdk.org/stable/0 stable/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 stable stable/ http://inbox.dpdk.org/stable \ stable@dpdk.org public-inbox-index stable Example config snippet for mirrors. Newsgroup available over NNTP: nntp://inbox.dpdk.org/inbox.dpdk.stable AGPL code for this site: git clone https://public-inbox.org/public-inbox.git