public inbox for passt-dev@passt.top
 help / color / mirror / code / Atom feed
* [PATCH] tap: fix seq->p.count limit
@ 2023-08-09  9:23 Laurent Vivier
  2023-08-09  9:54 ` David Gibson
                   ` (2 more replies)
  0 siblings, 3 replies; 5+ messages in thread
From: Laurent Vivier @ 2023-08-09  9:23 UTC (permalink / raw)
  To: passt-dev; +Cc: Laurent Vivier

The number of items in pool_l4_t is defined to UIO_MAXIOV,
not TAP_SEQS. TAP_SEQS is the number of the messages.

Fix the value used to compare seq->p.count with.

Fix: bb708111833e ("treewide: Packet abstraction with mandatory boundary checks")
Signed-off-by: Laurent Vivier <lvivier@redhat.com>
---
 tap.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tap.c b/tap.c
index e034f9468267..69bd19a2a91a 100644
--- a/tap.c
+++ b/tap.c
@@ -678,7 +678,7 @@ resume:
 		seq->daddr.s_addr	= iph->daddr;			\
 	} while (0)
 
-		if (seq && L4_MATCH(iph, uh, seq) && seq->p.count < TAP_SEQS)
+		if (seq && L4_MATCH(iph, uh, seq) && seq->p.count < UIO_MAXIOV)
 			goto append;
 
 		if (seq_count == TAP_SEQS)
@@ -686,7 +686,7 @@ resume:
 
 		for (seq = tap4_l4 + seq_count - 1; seq >= tap4_l4; seq--) {
 			if (L4_MATCH(iph, uh, seq)) {
-				if (seq->p.count >= TAP_SEQS)
+				if (seq->p.count >= UIO_MAXIOV)
 					seq = NULL;
 				break;
 			}
@@ -840,7 +840,7 @@ resume:
 	} while (0)
 
 		if (seq && L4_MATCH(ip6h, proto, uh, seq) &&
-		    seq->p.count < TAP_SEQS)
+		    seq->p.count < UIO_MAXIOV)
 			goto append;
 
 		if (seq_count == TAP_SEQS)
@@ -848,7 +848,7 @@ resume:
 
 		for (seq = tap6_l4 + seq_count - 1; seq >= tap6_l4; seq--) {
 			if (L4_MATCH(ip6h, proto, uh, seq)) {
-				if (seq->p.count >= TAP_SEQS)
+				if (seq->p.count >= UIO_MAXIOV)
 					seq = NULL;
 				break;
 			}
-- 
@@ -678,7 +678,7 @@ resume:
 		seq->daddr.s_addr	= iph->daddr;			\
 	} while (0)
 
-		if (seq && L4_MATCH(iph, uh, seq) && seq->p.count < TAP_SEQS)
+		if (seq && L4_MATCH(iph, uh, seq) && seq->p.count < UIO_MAXIOV)
 			goto append;
 
 		if (seq_count == TAP_SEQS)
@@ -686,7 +686,7 @@ resume:
 
 		for (seq = tap4_l4 + seq_count - 1; seq >= tap4_l4; seq--) {
 			if (L4_MATCH(iph, uh, seq)) {
-				if (seq->p.count >= TAP_SEQS)
+				if (seq->p.count >= UIO_MAXIOV)
 					seq = NULL;
 				break;
 			}
@@ -840,7 +840,7 @@ resume:
 	} while (0)
 
 		if (seq && L4_MATCH(ip6h, proto, uh, seq) &&
-		    seq->p.count < TAP_SEQS)
+		    seq->p.count < UIO_MAXIOV)
 			goto append;
 
 		if (seq_count == TAP_SEQS)
@@ -848,7 +848,7 @@ resume:
 
 		for (seq = tap6_l4 + seq_count - 1; seq >= tap6_l4; seq--) {
 			if (L4_MATCH(ip6h, proto, uh, seq)) {
-				if (seq->p.count >= TAP_SEQS)
+				if (seq->p.count >= UIO_MAXIOV)
 					seq = NULL;
 				break;
 			}
-- 
2.41.0


^ permalink raw reply related	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2023-08-13 16:31 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-08-09  9:23 [PATCH] tap: fix seq->p.count limit Laurent Vivier
2023-08-09  9:54 ` David Gibson
2023-08-09 15:44 ` Laurent Vivier
2023-08-13 13:17 ` Stefano Brivio
2023-08-13 16:31   ` Stefano Brivio

Code repositories for project(s) associated with this public inbox

	https://passt.top/passt

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for IMAP folder(s).