Re: [RFC] [NET] [0/2] pskb_expand_head() bugfix

[Hideo AOKI <haoki@redhat.com>]

David Miller wrote:
> From: Hideo AOKI <haoki@redhat.com>
> Date: Fri, 28 Mar 2008 21:02:41 -0400
> 
>> Hello David,
>>
>> David Miller wrote:
>>> From: Hideo AOKI <haoki@redhat.com>
>>> Date: Tue, 25 Mar 2008 14:39:04 -0400
>>>
>>>> Current pskb_expand_head() doesn't change truesize, while it
>>>> reallocates memory. Then, if argument nhead or ntail aren't 0, caller
>>>> must update truesize.
>>>>
>>>> We had this bug at audit_expand() in January and fixed it as commit
>>>> 406a1d868001423c85a3165288e566e65f424fe6. However, some drivers and
>>>> subsystems still use pskb_expand_head() without updating truesize.
>>>>
>>>> In addition, there is another problem to update truesise. Since
>>>> pskb_expand_head() aligns memory size before reallocation, caller
>>>> functions may not update turesize correctly if they just add nhaad
>>>> and ntail to turesize.
>>> Drivers may not update truesize, because as I explained in
>>> Tokyo a fundamental issue is the case where SKB is charged
>>> already to a socket.  In such a case, skb->truesize may not
>>> be modified without corrupting socket write queue allocation
>>> state.
>>>
>>> And at these very spots in drivers, the transmit path, the
>>> SKB is very likely to be owned by a socket.
>> Thank you for explaining.
>>
>> OK. I don't change driver code to avoid double charge.
> 
> This also applies to the output path, which I would say is about %95
> of the "truesize buggy" functions you quoted in your previous email.
> 
> So we are back to where we started when Herbert and I started replying
> in this thread, in that there is one (audit) or perhaps 1 or 2 more
> other cases that need truesize adjustment, nothing more.
> 
> Audit is fixed, and if you can find other relevant cases they can
> be fixed locally.
> 
> We cannot change pskb_expand_head() to make truesize adjustments, it
> would break things in %95 of the places where it is called.

Thank you for you quick response.

I'll try to find the cases.

Regards,

--
Hitachi Computer Products (America) Inc.