Maciej Żenczykowski
3c0569d770
ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu ...
__bpf_skb_max_len(skb) is used from:
bpf_skb_adjust_room
__bpf_skb_change_tail
__bpf_skb_change_head
but in the case of forwarding we're likely calling these functions
during receive processing on ingress and bpf_redirect()'ing at
a later point in time to egress on another interface, thus these
mtu checks are for the wrong device (input instead of output).
This is particularly problematic if we're receiving on an L3 1500 mtu
cellular interface, trying to add an L2 header and forwarding to
an L3 mtu 1500 mtu wifi/ethernet device (which is thus L2 1514).
The mtu check prevents us from adding the 14 byte ethernet header prior
to forwarding the packet.
After the packet has already been redirected, we'd need to add
an additional 2nd ebpf program on the target device's egress tc hook,
but then we'd also see non-redirected traffic and have no easy
way to tell apart normal egress with ethernet header packets
from forwarded ethernet headerless packets.
Cc: Alexei Starovoitov <ast@kernel.org>
Cc: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Link: https://patchwork.ozlabs.org/project/netdev/patch/20200507023606.111650-1-zenczykowski@gmail.com/
But note that a more thorough solution will be pursued.
Bug: 149816401
Change-Id: If55a144d7822e23bce85f65897bca7de4e0f9b24
2020-05-29 23:48:39 +00:00
6lowpan: Off by one handling ->nexthdr
2020-01-27 14:50:41 +01:00
9p: Transport error uninitialized
2019-10-11 18:21:12 +02:00
vlan: vlan_changelink() should propagate errors
2020-01-12 12:17:28 +01:00
appletalk: Set error code if register_snap_client failed
2019-12-13 08:52:59 +01:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
ax25: enforce CAP_NET_RAW for raw sockets
2019-10-05 13:09:32 +02:00
batman-adv: Fix refcnt leak in batadv_v_ogm_process
2020-05-14 07:57:22 +02:00
Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
2020-04-13 10:45:14 +02:00
signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig
2020-01-27 14:50:51 +01:00
ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING
2020-03-03 14:26:54 -08:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
can: gw: Fix error path of cgw_module_init
2019-08-29 08:28:30 +02:00
ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL
2020-04-02 15:28:16 +02:00
ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu
2020-05-29 23:48:39 +00:00
net: ipv6: add net argument to ip6_dst_lookup_flow
2020-04-29 16:31:16 +02:00
net: add bool confirm_neigh parameter for dst_ops.update_pmtu
2020-01-04 19:13:37 +01:00
KEYS: Don't write out to userspace while holding key semaphore
2020-04-23 10:30:24 +02:00
net: dsa: Do not make user port errors fatal
2020-05-20 08:18:32 +02:00
net: add annotations on hh->hh_len lockless accesses
2020-01-09 10:19:09 +01:00
hsr: check protocol version in hsr_newlink()
2020-04-21 09:03:03 +02:00
nl802154: add missing attribute validation for dev_type
2020-03-18 07:14:15 +01:00
This is the 4.19.124 stable release
2020-05-20 11:37:46 +02:00
This is the 4.19.124 stable release
2020-05-20 11:37:46 +02:00
net/af_iucv: always register net_device notifier
2020-01-27 14:50:56 +01:00
UPSTREAM: kcm: use BPF_PROG_RUN
2019-09-20 10:58:37 -07:00
af_key: fix leaks in key_pol_get_resp and dump_sp.
2019-07-26 09:14:01 +02:00
net: ipv6: add net argument to ip6_dst_lookup_flow
2020-04-29 16:31:16 +02:00
lapb: fixed leak of control-blocks.
2019-06-22 08:15:13 +02:00
llc: fix sk_buff refcounting in llc_conn_state_process()
2020-01-27 14:51:17 +01:00
This is the 4.19.122 stable release
2020-05-11 09:54:34 +02:00
net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
2020-04-29 16:31:17 +02:00
This is the 4.19.124 stable release
2020-05-20 11:37:46 +02:00
netlabel: cope with NULL catmap
2020-05-20 08:18:35 +02:00
netlink: Use netlink header as base to calculate bad attribute offset
2020-03-18 07:14:12 +01:00
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2020-04-29 16:31:21 +02:00
nfc: add missing attribute validation for vendor subcommand
2020-03-18 07:14:17 +01:00
openvswitch: support asymmetric conntrack
2019-12-21 10:57:14 +01:00
net/packet: tpacket_rcv: avoid a producer race condition
2020-04-02 15:28:11 +02:00
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
net: psample: fix skb_over_panic
2019-12-05 09:21:30 +01:00
net: qrtr: send msgs from local of same id as broadcast
2020-04-21 09:03:04 +02:00
net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
2020-01-27 14:51:13 +01:00
rfkill: Fix incorrect check to avoid NULL pointer dereference
2020-01-12 12:17:17 +01:00
net/rose: fix unbound loop in rose_loopback_timer()
2019-05-02 09:59:00 +02:00
rxrpc: Fix ack discard
2020-05-27 17:37:46 +02:00
sch_sfq: validate silly quantum values
2020-05-14 07:57:18 +02:00
sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
2020-05-14 07:57:20 +02:00
net/smc: cancel event worker during device removal
2020-03-18 07:14:25 +01:00
net: strparser: partially revert "strparser: Call skb_unclone conditionally"
2019-05-16 19:41:27 +02:00
svcrdma: Fix leak of svc_rdma_recv_ctxt objects
2020-05-02 17:25:52 +02:00
tipc: fix partial topology connection closure
2020-05-14 07:57:18 +02:00
net/tls: Fix to avoid gettig invalid tls record
2020-03-05 16:42:17 +01:00
af_unix: add compat_ioctl support
2020-01-17 19:47:07 +01:00
hv_sock: Remove the accept port restriction
2020-02-14 16:33:22 -05:00
ANDROID: GKI: cfg80211: Include length of kek in rekey data
2020-04-30 21:32:15 +00:00
net/x25: Fix x25_neigh refcnt leak when receiving frame
2020-04-29 16:31:21 +02:00
xsk: Add missing check on user supplied headroom size
2020-04-23 10:30:15 +02:00
This is the 4.19.114 stable release
2020-04-03 08:17:23 +02:00
BACKPORT: net: disable BRIDGE_NETFILTER by default
2020-02-28 10:42:51 -08:00
compat_ioctl: handle SIOCOUTQNSD
2020-01-17 19:47:07 +01:00
3c0569d770