]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
net: sched: fix erspan_opt settings in cls_flower
authorXin Long <lucien.xin@gmail.com>
Mon, 2 Dec 2024 15:21:38 +0000 (10:21 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 14 Dec 2024 18:51:28 +0000 (19:51 +0100)
[ Upstream commit 292207809486d99c78068d3f459cbbbffde88415 ]

When matching erspan_opt in cls_flower, only the (version, dir, hwid)
fields are relevant. However, in fl_set_erspan_opt() it initializes
all bits of erspan_opt and its mask to 1. This inadvertently requires
packets to match not only the (version, dir, hwid) fields but also the
other fields that are unexpectedly set to 1.

This patch resolves the issue by ensuring that only the (version, dir,
hwid) fields are configured in fl_set_erspan_opt(), leaving the other
fields to 0 in erspan_opt.

Fixes: 79b1011cb33d ("net: sched: allow flower to match erspan options")
Reported-by: Shuang Li <shuali@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Reviewed-by: Cong Wang <cong.wang@bytedance.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/sched/cls_flower.c

index bff0a5f24aca869101864f5de68bc1e31757f587..057612c97a3728a78ac222184a544959c90be5a0 100644 (file)
@@ -1224,7 +1224,6 @@ static int fl_set_erspan_opt(const struct nlattr *nla, struct fl_flow_key *key,
        int err;
 
        md = (struct erspan_metadata *)&key->enc_opts.data[key->enc_opts.len];
-       memset(md, 0xff, sizeof(*md));
        md->version = 1;
 
        if (!depth)
@@ -1253,9 +1252,9 @@ static int fl_set_erspan_opt(const struct nlattr *nla, struct fl_flow_key *key,
                        NL_SET_ERR_MSG(extack, "Missing tunnel key erspan option index");
                        return -EINVAL;
                }
+               memset(&md->u.index, 0xff, sizeof(md->u.index));
                if (tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX]) {
                        nla = tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX];
-                       memset(&md->u, 0x00, sizeof(md->u));
                        md->u.index = nla_get_be32(nla);
                }
        } else if (md->version == 2) {
@@ -1264,10 +1263,12 @@ static int fl_set_erspan_opt(const struct nlattr *nla, struct fl_flow_key *key,
                        NL_SET_ERR_MSG(extack, "Missing tunnel key erspan option dir or hwid");
                        return -EINVAL;
                }
+               md->u.md2.dir = 1;
                if (tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR]) {
                        nla = tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR];
                        md->u.md2.dir = nla_get_u8(nla);
                }
+               set_hwid(&md->u.md2, 0xff);
                if (tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID]) {
                        nla = tb[TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID];
                        set_hwid(&md->u.md2, nla_get_u8(nla));