Re: [PATCH net-next v5 1/2] drivers: net: prevent tun_build_skb() to exceed the packet size limit
From: patchwork-bot+netdevbpf
Date: Mon Aug 07 2023 - 22:20:54 EST
Hello:
This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Thu, 3 Aug 2023 20:59:48 +0200 you wrote:
> Using the syzkaller repro with reduced packet size it was discovered
> that XDP_PACKET_HEADROOM is not checked in tun_can_build_skb(),
> although pad may be incremented in tun_build_skb(). This may end up
> with exceeding the PAGE_SIZE limit in tun_build_skb().
>
> Jason Wang <jasowang@xxxxxxxxxx> proposed to count XDP_PACKET_HEADROOM
> always (e.g. without rcu_access_pointer(tun->xdp_prog)) in
> tun_can_build_skb() since there's a window during which XDP program
> might be attached between tun_can_build_skb() and tun_build_skb().
>
> [...]
Here is the summary with links:
- [net-next,v5,1/2] drivers: net: prevent tun_build_skb() to exceed the packet size limit
https://git.kernel.org/netdev/net/c/59eeb2329405
- [net-next,v5,2/2] net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
https://git.kernel.org/netdev/net/c/d14eea09edf4
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html