]> git.baikalelectronics.ru Git - kernel.git/commitdiff
net/tls: fix async operation
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 10 Jan 2020 12:38:32 +0000 (04:38 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 10 Jan 2020 19:20:46 +0000 (11:20 -0800)
Mallesham reports the TLS with async accelerator was broken by
commit 14210c49b09b ("net/tls: free the record on encryption error")
because encryption can return -EINPROGRESS in such setups, which
should not be treated as an error.

The error is also present in the BPF path (likely copied from there).

Reported-by: Mallesham Jatharakonda <mallesham.jatharakonda@oneconvergence.com>
Fixes: 635a8c9b3da8 ("tls: add bpf support to sk_msg handling")
Fixes: 14210c49b09b ("net/tls: free the record on encryption error")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Simon Horman <simon.horman@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tls/tls_sw.c

index 1bf886269ede45223546d846ea02b88a9b431454..5c7c00429f8e033d25b9e87330bd40ad0bcca5f9 100644 (file)
@@ -770,7 +770,7 @@ static int bpf_exec_tx_verdict(struct sk_msg *msg, struct sock *sk,
        psock = sk_psock_get(sk);
        if (!psock || !policy) {
                err = tls_push_record(sk, flags, record_type);
-               if (err) {
+               if (err && err != -EINPROGRESS) {
                        *copied -= sk_msg_free(sk, msg);
                        tls_free_open_rec(sk);
                }
@@ -799,7 +799,7 @@ more_data:
        switch (psock->eval) {
        case __SK_PASS:
                err = tls_push_record(sk, flags, record_type);
-               if (err < 0) {
+               if (err && err != -EINPROGRESS) {
                        *copied -= sk_msg_free(sk, msg);
                        tls_free_open_rec(sk);
                        goto out_err;