]> git.baikalelectronics.ru Git - kernel.git/commitdiff
i40e: Disallow ip4 and ip6 l4_4_bytes
authorPrzemyslaw Patynowski <przemyslawx.patynowski@intel.com>
Tue, 15 Nov 2022 08:49:25 +0000 (09:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 14 Dec 2022 10:30:46 +0000 (11:30 +0100)
[ Upstream commit d64aaf3f7869f915fd120763d75f11d6b116424d ]

Return -EOPNOTSUPP, when user requests l4_4_bytes for raw IP4 or
IP6 flow director filters. Flow director does not support filtering
on l4 bytes for PCTYPEs used by IP4 and IP6 filters.
Without this patch, user could create filters with l4_4_bytes fields,
which did not do any filtering on L4, but only on L3 fields.

Fixes: 482b43e50562 ("i40e: check current configured input set when adding ntuple filters")
Signed-off-by: Przemyslaw Patynowski <przemyslawx.patynowski@intel.com>
Signed-off-by: Kamil Maziarz <kamil.maziarz@intel.com>
Reviewed-by: Jacob Keller <jacob.e.keller@intel.com>
Tested-by: Gurucharan G <gurucharanx.g@intel.com> (A Contingent worker at Intel)
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/ethernet/intel/i40e/i40e_ethtool.c

index 7059ced247392c4ff54bdaf5b6efe0995610ccee..95a6f8689b6f1965f472a6f6e2073a341f010724 100644 (file)
@@ -4233,11 +4233,7 @@ static int i40e_check_fdir_input_set(struct i40e_vsi *vsi,
                        return -EOPNOTSUPP;
 
                /* First 4 bytes of L4 header */
-               if (usr_ip4_spec->l4_4_bytes == htonl(0xFFFFFFFF))
-                       new_mask |= I40E_L4_SRC_MASK | I40E_L4_DST_MASK;
-               else if (!usr_ip4_spec->l4_4_bytes)
-                       new_mask &= ~(I40E_L4_SRC_MASK | I40E_L4_DST_MASK);
-               else
+               if (usr_ip4_spec->l4_4_bytes)
                        return -EOPNOTSUPP;
 
                /* Filtering on Type of Service is not supported. */