tap: call skb_probe_transport_header after setting skb->dev
The BPF flow dissector expects either skb->sk or skb->dev set on
all skbs. Delay flow dissection until after skb->dev is set.
This requires calling from within an rcu read-side critical section.
That is fine, see also the call from tun_xdp_one.
Fixes: d0e13a1488
("flow_dissector: lookup netns by skb->sk if skb->dev is NULL")
Reported-by: Christian Borntraeger <borntraeger@de.ibm.com>
Signed-off-by: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
aff6db4545
commit
8c76e77f90
|
@ -1177,8 +1177,6 @@ static int tap_get_user_xdp(struct tap_queue *q, struct xdp_buff *xdp)
|
||||||
goto err_kfree;
|
goto err_kfree;
|
||||||
}
|
}
|
||||||
|
|
||||||
skb_probe_transport_header(skb, ETH_HLEN);
|
|
||||||
|
|
||||||
/* Move network header to the right position for VLAN tagged packets */
|
/* Move network header to the right position for VLAN tagged packets */
|
||||||
if ((skb->protocol == htons(ETH_P_8021Q) ||
|
if ((skb->protocol == htons(ETH_P_8021Q) ||
|
||||||
skb->protocol == htons(ETH_P_8021AD)) &&
|
skb->protocol == htons(ETH_P_8021AD)) &&
|
||||||
|
@ -1189,6 +1187,7 @@ static int tap_get_user_xdp(struct tap_queue *q, struct xdp_buff *xdp)
|
||||||
tap = rcu_dereference(q->tap);
|
tap = rcu_dereference(q->tap);
|
||||||
if (tap) {
|
if (tap) {
|
||||||
skb->dev = tap->dev;
|
skb->dev = tap->dev;
|
||||||
|
skb_probe_transport_header(skb, ETH_HLEN);
|
||||||
dev_queue_xmit(skb);
|
dev_queue_xmit(skb);
|
||||||
} else {
|
} else {
|
||||||
kfree_skb(skb);
|
kfree_skb(skb);
|
||||||
|
|
Loading…
Reference in New Issue