lkml.org 
[lkml]   [2018]   [Dec]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4.19 020/139] net: skb_scrub_packet(): Scrub offload_fwd_mark
    Date
    4.19-stable review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Petr Machata <petrm@mellanox.com>

    [ Upstream commit b5dd186d10ba59e6b5ba60e42b3b083df56df6f3 ]

    When a packet is trapped and the corresponding SKB marked as
    already-forwarded, it retains this marking even after it is forwarded
    across veth links into another bridge. There, since it ingresses the
    bridge over veth, which doesn't have offload_fwd_mark, it triggers a
    warning in nbp_switchdev_frame_mark().

    Then nbp_switchdev_allowed_egress() decides not to allow egress from
    this bridge through another veth, because the SKB is already marked, and
    the mark (of 0) of course matches. Thus the packet is incorrectly
    blocked.

    Solve by resetting offload_fwd_mark() in skb_scrub_packet(). That
    function is called from tunnels and also from veth, and thus catches the
    cases where traffic is forwarded between bridges and transformed in a
    way that invalidates the marking.

    Fixes: 6bc506b4fb06 ("bridge: switchdev: Add forward mark support for stacked devices")
    Fixes: abf4bb6b63d0 ("skbuff: Add the offload_mr_fwd_mark field")
    Signed-off-by: Petr Machata <petrm@mellanox.com>
    Suggested-by: Ido Schimmel <idosch@mellanox.com>
    Acked-by: Jiri Pirko <jiri@mellanox.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    ---
    net/core/skbuff.c | 5 +++++
    1 file changed, 5 insertions(+)

    --- a/net/core/skbuff.c
    +++ b/net/core/skbuff.c
    @@ -4912,6 +4912,11 @@ void skb_scrub_packet(struct sk_buff *sk
    nf_reset(skb);
    nf_reset_trace(skb);

    +#ifdef CONFIG_NET_SWITCHDEV
    + skb->offload_fwd_mark = 0;
    + skb->offload_mr_fwd_mark = 0;
    +#endif
    +
    if (!xnet)
    return;


    \
     
     \ /
      Last update: 2018-12-04 12:33    [W:3.501 / U:0.648 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site