From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00058.outbound.protection.outlook.com [40.107.0.58]) by dpdk.org (Postfix) with ESMTP id A55E31B655 for ; Tue, 30 Jan 2018 17:00:47 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Mellanox.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=4ZteKvCAp7OZzx904VnBy0k2Kua8ISnTctX/LmgtsqU=; b=JG4bYYZdB+kPM0Nl4BoK+9yohHnT40S7B9j1F72WUpG9SeV7HABqlMBYpD8PWftnY2v2da9sQE4PmLLy839DWOf5sDamIYZa1m/a49LiRAGgOBViSH+nnXovfeKvqEa8tb5TUaVrqTihs/8Dj3NM9O/nsWNUL/N+5RCtVLrWUPc= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=ophirmu@mellanox.com; Received: from mellanox.com (37.142.13.130) by HE1PR0502MB3881.eurprd05.prod.outlook.com (2603:10a6:7:87::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Tue, 30 Jan 2018 16:00:45 +0000 From: Ophir Munk To: dev@dpdk.org, Pascal Mazon Cc: Thomas Monjalon , Olga Shern , Ophir Munk Date: Tue, 30 Jan 2018 16:00:28 +0000 Message-Id: <1517328029-17052-2-git-send-email-ophirmu@mellanox.com> X-Mailer: git-send-email 1.8.3.1 In-Reply-To: <1517328029-17052-1-git-send-email-ophirmu@mellanox.com> References: <1517224703-20708-1-git-send-email-ophirmu@mellanox.com> <1517328029-17052-1-git-send-email-ophirmu@mellanox.com> MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [37.142.13.130] X-ClientProxiedBy: DB3PR0202CA0009.eurprd02.prod.outlook.com (2603:10a6:8:1::22) To HE1PR0502MB3881.eurprd05.prod.outlook.com (2603:10a6:7:87::24) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 81d7188f-584b-4cb8-7c6c-08d567fa9fc7 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(2017052603307)(7153060)(7193020); SRVR:HE1PR0502MB3881; X-Microsoft-Exchange-Diagnostics: 1; HE1PR0502MB3881; 3:a/A4Z7bXpA9PtHtzPgZJEl2Vgwa9Mdki/o6xMs909TUXXybPq0EYMtWGU22+g7p/U6b+WUJzkoXaeX8mlQ8O1Qv1L0ZXuIDdDiMLNfaTmlp80xnBxLZ5CMIEqAwlxN3WvzPzO95VpfkbVjecGF5U2550QiqzoYPFsiGN9x1CBlKOj6NQ/B+5pmB1IXH0dup8bXbeysAhNSNJKkH3WJlpDSRY/JR4SVHJNXnldTMywb4hsyeiYh+VtwRom5oHh6U8; 25:0YgLbxIQUiFAmQrCWfKWNCTPk8Al4jiKViDyi0lamOJH3YGQ2nNLhqRjqFvnTcTqkAYEdv0/SS8wpHRJkDeYB5bMLqE47c71aZiHEaFUJJx6RhIcatrhCssU6nRKX7WGTtgJKURefxZKjz/e0TxQNtLylEfLohYHC0bz8/CFBW/F2I8iHFupj6cvLIWbJKA4EIqNL81lDqM4SgN61yyUmK1mxZr0hV4bC2OKaWT8ajsaakc56HJ1QT8Cz5hszayrAwJ/EeBUKnn3j6kqCvuB3wJbRgZeJQLHqMGJmdAK3JWPBnJ3L0zWwuIGOZeSIQaWb2P13gj9TIgYSN5QBW8paQ==; 31:QEtGICeltPtQzewzpPuHoD8JINGAOChFW1InALcir4QBJAyoRrCocEeqqfRi2ORtoXuPg5W0Sy4pWmqbiJGZmuXiiXs4sF1mXlwae6ei4sOfshHnVjIlMQ/9aaITWS238kOzsr2/STlTEL9jVULp/IbNYN8d0UmtVbe8qrbppXCXnHsjgPNQpNr2TmoZBA6i2LG5FLEB6eciJ/ItNtqxdqAH7p2H1EKmhcHVJuIuSOA= X-MS-TrafficTypeDiagnostic: HE1PR0502MB3881: X-LD-Processed: a652971c-7d2e-4d9b-a6a4-d149256f461b,ExtAddr X-Microsoft-Exchange-Diagnostics: 1; HE1PR0502MB3881; 20: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; 4:8oWr98PE+B4hvWr27qfwN2cWk84elZIlRLjgOzlmD2aq9zcve2jvTm9aBcYgyEqTpbj23QsKgALkZQX5vV1kJ5BgXYfjCHWBXwW0yUfh0qiyKHs+3GHQN6xoZomndIL/0YqVvu9osQr1raqLh0vI1uF3IA8oDlwa8pocCJWRHCZEO4MQxQK9JzGMBfWudjNS3EFgevAvyj7dcANm6X+1hl3gnVuUlrHhlbMgo8rlUoiUbAaaDQO9rkavVrS0I+RtGRy5RWfe/fc87ipkcR1xoQ== X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231101)(944501161)(3002001)(10201501046)(6055026)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:HE1PR0502MB3881; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0502MB3881; X-Forefront-PRVS: 0568F32D91 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(376002)(39380400002)(396003)(366004)(346002)(39860400002)(189003)(199004)(7696005)(86362001)(76176011)(16526019)(48376002)(186003)(59450400001)(107886003)(16586007)(52116002)(54906003)(316002)(33026002)(386003)(68736007)(51416003)(50466002)(47776003)(478600001)(66066001)(26005)(6666003)(55016002)(97736004)(105586002)(36756003)(5660300001)(25786009)(2950100002)(6916009)(4326008)(21086003)(4720700003)(7736002)(106356001)(50226002)(53936002)(6116002)(69596002)(3846002)(305945005)(8936002)(8676002)(2906002)(81156014)(81166006); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0502MB3881; H:mellanox.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: mellanox.com does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; HE1PR0502MB3881; 23:ueV3Hzi6lnm3oZhQWqp/zqItGB8+szip+zab/Vs?= =?us-ascii?Q?Nois1Md1/+yVxzqacCiIjxtNFvoT+wsNRSO8Q+NJqmBw84BqaLRJEDSBW2Xw?= =?us-ascii?Q?MLxLmM9SKw3rQ4ut/E1vFgx+uyPHZoUiMy8KtlsPi0yBXz1OBToTk10Z/jUp?= =?us-ascii?Q?Hr7LXtFq2YR3x2JoVRJT2OTm03ywT21I32IvDOTh8JpUXXVi0ftArcMwfJN9?= =?us-ascii?Q?rIA7B13gtrEquQOEqtHVffHdW9PNp2W11DKyPMxsLYHFXaRQVun4g8MpN21H?= =?us-ascii?Q?BgcDO0fUx7qjgE++/A0aSE61wDM2Uin8ZgfUwlPqnwkUt1hlOjEvO/XwdfSj?= =?us-ascii?Q?Qgkj5LgxXFVUDlDUrGzvc6TkK/cV7grzLNEVoCCLuGZcSHQccR/KCbcW3FeQ?= =?us-ascii?Q?JjIZP3mbgk0ddJbI5zDQJ2cwclnh5zNDxqcWN0L2/qpPDStBqDcearUHAQF8?= =?us-ascii?Q?ktOH2qcOKyjtKWMufCW7f4y4oWt2749EKjEaAaJawi2cpx6G04/3zeZSG+kM?= =?us-ascii?Q?PC4BwsgehPYAiuxioKNQdYMRghxzSfEg9c5GRXc9hq6ba6prBac730/MOkxc?= =?us-ascii?Q?94OhUWttSguuqiCojPuk86V2JyhlrF3h50w5AmrCOj6yw4EDeO9cdUSSaLVB?= =?us-ascii?Q?LCSznK7oo/k5ROsnVEcY3SilOkU5aanoUbxqwFo4j86j4+bYCRs7wXcGWOlG?= =?us-ascii?Q?ccF0rE0urehsur2nqpZzl61XJFfgZiVSe2eJzDXveMQQFzP1FzdxBeHc95hM?= =?us-ascii?Q?b5VQK2HA/e0reqTcaHHqQb06Ubx/V3jRsZl4U7xt5X3AjhHTQY67jIxHTFk9?= =?us-ascii?Q?I08yP4OAZsYFS58hDUXwbWl3TZ347HfQK/OxedauzBTffphNg7wEJ96OOzOf?= =?us-ascii?Q?ghgNWMSGFtjoMCkPIRAvL/9R91fVDLz5K4egOJkpZc8cHKIO3MWbDaDu+9m1?= =?us-ascii?Q?gtyuWtmR38AY9PuniIkKmvlEvqxQKjHW6XYjDWQwSt8pN8xdep+AyDykGRF2?= =?us-ascii?Q?6PbajGN98QyFvb0T9kG5dBenl00KR2cnqoqe68f6ci/JEJA4N7qXu6G6tznf?= =?us-ascii?Q?1KrkvoDNsSZKFqyJiHAGkD6m0TmUGtBy5ng9s2Gsup8gFl76OTPIk6wNAlUm?= =?us-ascii?Q?b7HhEx7mDspn3pYxmwB/asDrjbbppub+fsyVC33cYdaqFsFJVm5oRSLdFMHE?= =?us-ascii?Q?OKr+ic3pKo0eJ8X0Oxwj/+E4iiwqIxpJSAG7FLtEj/sNgASjJFe127OWXaXE?= =?us-ascii?Q?BrJTk0cdaNx21opNwspU=3D?= X-Microsoft-Exchange-Diagnostics: 1; HE1PR0502MB3881; 6:6PLqyvnsJFInNlg51uLfbYC0LpF0tQJ6ZQsxWJ+JlNmkZgInzpcdGDeToK1hldaTCxMoxyv3t0C9WV0ycrY97FyLzV4d5+zvS7YMzunEMmJuTiM+86xko/BLlX5hwJfqMq4Rdg7lNkIPiKWMxFX7TpGus8meWhIBR8pGcrhovnAwa/U4GHx+BujOg16WNHPmw8xlh9+I2/SrnkfugvdBJdh3nynykO8JUEWEw+1ftx9yXCpmSAQ+eCqbcbSxwmfTF9+/lDtETr6REnFaR4QMEAXnF/PtSHbg4Mm2Bcl0yCUysu89cDY+Mm8w3UEtErNFX4G1o2QKY6ByciQpSDT+hnMLMcGNDy6f3wRzzCJPvKU=; 5:G2GFLvArcr8flcy7jFTM1e8p0lAm05grcQ8+dbN/g8xeVKoefPDR9kPrEiea9aws5RZeTtcGpN4iwOFfyj7BkL/rbPgVjssX8VWB4E83+Oo1WJza+SfgT61Y8bH4EbD4MTgouUIEGbrPN7r5T2ZdofAPOk9TmE+ejGtgoRpIfwc=; 24:MwbzhZfttSK42gOJS52CEib+VNRTidkDaRGxyxJ2TxRwqM9mtFBZynouHEuxdVUZobcC2rIoaGBnKc7AyiyzQhYL5CGa0kueaattPxgnSr0=; 7:pt+X6NO8LdomakSLRnLzwBvSufE57NR0BekGSPVZJxNulUU5gz2+HrKsNjdyAkg9h9Pktnc/5erIwSP1ObUmLJxAfCm6bB4KohiZQXGiNRQaAYLIQYxvSpcROLyQsc55G2k0Wj0KiXNs9gQfRc5toKx4RqlCqtvfBJVu/RtGt9S3Mu0JADTWCk7/Z3SJzJi/eaASLiAD7uctow0tXuRO1U/KCCACnIW/kR1M2NpjOvB/yF/07tTRzIj4egUqUUmQ SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: Mellanox.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jan 2018 16:00:45.1366 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 81d7188f-584b-4cb8-7c6c-08d567fa9fc7 X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: a652971c-7d2e-4d9b-a6a4-d149256f461b X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0502MB3881 Subject: [dpdk-dev] [PATCH v2 1/2] net/tap: fix eBPF file descriptors leakage X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 16:00:48 -0000 When a user creates an RSS rule, the tap PMD dynamically allocates a 'flow' data structure, and uploads BPF programs (represented by file descriptors) to the kernel. The kernel might reject the rule (due to filters overlap, for example) in which case, flow memory should be freed and BPF file descriptors should be closed. In the corrupted code there were scenarios where BPF file descriptors were not closed. The fix is to add a new function - tap_flow_free(), which will make sure to always close BPF file descriptors before freeing the flow allocated memory. Fixes: 036d721a8229 ("net/tap: implement RSS using eBPF") Signed-off-by: Ophir Munk --- drivers/net/tap/tap_flow.c | 57 ++++++++++++++++++++++++++++++---------------- 1 file changed, 38 insertions(+), 19 deletions(-) diff --git a/drivers/net/tap/tap_flow.c b/drivers/net/tap/tap_flow.c index 6aa53a7..533879d 100644 --- a/drivers/net/tap/tap_flow.c +++ b/drivers/net/tap/tap_flow.c @@ -212,6 +212,10 @@ tap_flow_create(struct rte_eth_dev *dev, const struct rte_flow_action actions[], struct rte_flow_error *error); +static void +tap_flow_free(struct pmd_internals *pmd, + struct rte_flow *flow); + static int tap_flow_destroy(struct rte_eth_dev *dev, struct rte_flow *flow, @@ -1311,6 +1315,38 @@ tap_flow_set_handle(struct rte_flow *flow) } /** + * Free the flow opened file descriptors and allocated memory + * + * @param[in] flow + * Pointer to the flow to free + * + */ +static void +tap_flow_free(struct pmd_internals *pmd, struct rte_flow *flow) +{ + int i; + + if (!flow) + return; + + if (pmd->rss_enabled) { + /* Close flow BPF file descriptors */ + for (i = 0; i < SEC_MAX; i++) + if (flow->bpf_fd[i] != 0) { + close(flow->bpf_fd[i]); + flow->bpf_fd[i] = 0; + } + + /* Release the map key for this RSS rule */ + bpf_rss_key(KEY_CMD_RELEASE, &flow->key_idx); + flow->key_idx = 0; + } + + /* Free flow allocated memory */ + rte_free(flow); +} + +/** * Create a flow. * * @see rte_flow_create() @@ -1428,7 +1464,7 @@ tap_flow_create(struct rte_eth_dev *dev, if (remote_flow) rte_free(remote_flow); if (flow) - rte_free(flow); + tap_flow_free(pmd, flow); return NULL; } @@ -1450,7 +1486,6 @@ tap_flow_destroy_pmd(struct pmd_internals *pmd, struct rte_flow_error *error) { struct rte_flow *remote_flow = flow->remote_flow; - int i; int ret = 0; LIST_REMOVE(flow, next); @@ -1476,22 +1511,6 @@ tap_flow_destroy_pmd(struct pmd_internals *pmd, "couldn't receive kernel ack to our request"); goto end; } - /* Close opened BPF file descriptors of this flow */ - for (i = 0; i < SEC_MAX; i++) - if (flow->bpf_fd[i] != 0) { - close(flow->bpf_fd[i]); - flow->bpf_fd[i] = 0; - } - - /* Release map key for this RSS rule */ - ret = bpf_rss_key(KEY_CMD_RELEASE, &flow->key_idx); - if (ret < 0) { - rte_flow_error_set( - error, EINVAL, RTE_FLOW_ERROR_TYPE_HANDLE, NULL, - "Failed to release BPF RSS key"); - - goto end; - } if (remote_flow) { remote_flow->msg.nh.nlmsg_flags = NLM_F_REQUEST | NLM_F_ACK; @@ -1520,7 +1539,7 @@ tap_flow_destroy_pmd(struct pmd_internals *pmd, end: if (remote_flow) rte_free(remote_flow); - rte_free(flow); + tap_flow_free(pmd, flow); return ret; } -- 2.7.4