From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by dpdk.org (Postfix) with ESMTP id 207E81AFFF for ; Thu, 7 Jun 2018 18:04:49 +0200 (CEST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jun 2018 09:04:49 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.49,486,1520924400"; d="scan'208";a="62655349" Received: from irsmsx101.ger.corp.intel.com ([163.33.3.153]) by orsmga001.jf.intel.com with ESMTP; 07 Jun 2018 09:04:48 -0700 Received: from irsmsx105.ger.corp.intel.com ([169.254.7.126]) by IRSMSX101.ger.corp.intel.com ([169.254.1.148]) with mapi id 14.03.0319.002; Thu, 7 Jun 2018 17:04:47 +0100 From: "Ananyev, Konstantin" To: "Wu, Yanglong" , "dev@dpdk.org" CC: "Zhang, Qi Z" Thread-Topic: [PATCH] net/i40e: illagel pactket checking Thread-Index: AQHT/kSMNXYSr5xTZEqUNPPAaN8XzaRU87sA Date: Thu, 7 Jun 2018 16:04:46 +0000 Message-ID: <2601191342CEEE43887BDE71AB977258C0C391AC@irsmsx105.ger.corp.intel.com> References: <20180607093938.62579-1-yanglong.wu@intel.com> In-Reply-To: <20180607093938.62579-1-yanglong.wu@intel.com> Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiOTAwY2I0OGEtYjAzYy00ZGUyLThhN2QtYjQ3Y2Y2MGRhOThjIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX05UIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE3LjEwLjE4MDQuNDkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiUlV0d29LeU9Qak00Y1pmblZCeCtPa3lEejlGQ2JycUlZM0xYUGc5MFdXR2ZaOVdiaXVMRjAxZkVpRnBCUGs4aSJ9 x-ctpclassification: CTP_NT dlp-product: dlpe-windows dlp-version: 11.0.200.100 dlp-reaction: no-action x-originating-ip: [163.33.239.180] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-dev] [PATCH] net/i40e: illagel pactket checking X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jun 2018 16:04:50 -0000 Hi Yanglong, > -----Original Message----- > From: Wu, Yanglong > Sent: Thursday, June 7, 2018 10:40 AM > To: dev@dpdk.org > Cc: Zhang, Qi Z ; Ananyev, Konstantin ; Wu, Yanglong > > Subject: [PATCH] net/i40e: illagel pactket checking >=20 > Some illegal packets will lead to TX/RX hang and > can't recover automatically. This pacth check those > illegal packets and protect TX/RX from hanging. >=20 > Signed-off-by: Yanglong Wu > --- > drivers/net/i40e/i40e_rxtx.c | 10 ++++++++++ > drivers/net/i40e/i40e_rxtx.h | 2 ++ > 2 files changed, 12 insertions(+) >=20 > diff --git a/drivers/net/i40e/i40e_rxtx.c b/drivers/net/i40e/i40e_rxtx.c > index 6032d5541..be00b898e 100644 > --- a/drivers/net/i40e/i40e_rxtx.c > +++ b/drivers/net/i40e/i40e_rxtx.c > @@ -1458,6 +1458,16 @@ i40e_prep_pkts(__rte_unused void *tx_queue, struct= rte_mbuf **tx_pkts, > return i; > } >=20 > + /*check the size of pkt len*/ > + if (m->pkt_len > ETHER_MAX_LEN || m->pkt_len < I40E_TX_MIN_PKT_LEN){ And why pkt_len greater then ETHER_MAX_LEN is not supported? What about jumbo frames? > + rte_errno =3D -EINVAL; > + return i;} > + > + /*check the number of mbuf segments*/ > + if(m->nb_segs > I40E_TX_MAX_MTU_SEG){ We already checking that in that function: /* Check for m->nb_segs to not exceed the limits. */ if (!(ol_flags & PKT_TX_TCP_SEG)) { if (m->nb_segs > I40E_TX_MAX_SEG || m->nb_segs > I40E_TX_MAX_MTU_SEG) { rte_errno =3D -EINVAL; return i; } } else if ((m->tso_segsz < I40E_MIN_TSO_MSS) || (m->tso_segsz > I40E_MAX_TSO_MSS)) { /* MSS outside the range (256B - 9674B) are conside= red * malicious */ rte_errno =3D -EINVAL; return i; } Though it seems it is not totally correct, should probably be: if (!(ol_flags & PKT_TX_TCP_SEG)) { if (m->nb_segs > I40E_TX_MAX_SEG) { ... } } else if (m->nb_segs > I40E_TX_MAX_MTU_SEG || m->tso_segsz < I40E_MIN_TSO_MSS || m->tso_segsz > I40E_MAX_TSO_MSS) { ... } > + rte_errno =3D -EINVAL; > + return i;} > + > #ifdef RTE_LIBRTE_ETHDEV_DEBUG > ret =3D rte_validate_tx_offload(m); > if (ret !=3D 0) { > diff --git a/drivers/net/i40e/i40e_rxtx.h b/drivers/net/i40e/i40e_rxtx.h > index ea73a8a1b..3fc619af9 100644 > --- a/drivers/net/i40e/i40e_rxtx.h > +++ b/drivers/net/i40e/i40e_rxtx.h > @@ -30,6 +30,8 @@ > #define I40E_TX_MAX_SEG UINT8_MAX > #define I40E_TX_MAX_MTU_SEG 8 >=20 > +#define I40E_TX_MIN_PKT_LEN 17 > + > #undef container_of > #define container_of(ptr, type, member) ({ \ > typeof(((type *)0)->member)(*__mptr) =3D (ptr); \ > -- > 2.11.0