From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 1B2B6606A338 for ; Tue, 20 Oct 2026 09:36:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=intel.com header.i=@intel.com header.a=rsa-sha256 header.s=Intel header.b=agCCHWQP Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 7F2C540270; Tue, 20 Oct 2026 11:36:21 +0200 (CEST) Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.7]) by mails.dpdk.org (Postfix) with ESMTP id A7FBB40144 for ; Tue, 20 Oct 2026 11:36:19 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1792488980; x=1824024980; h=message-id:date:subject:to:references:from:in-reply-to: mime-version; bh=+2pow9N8Vrq9lTmqQ4y2QtgdsbS/rrYUImvfc08hvGU=; b=agCCHWQPvgneVkfK3euqk2XajqzsAzAGf+UfMFR5hum0JjgIzI1ke5PT rna4jHb9EiM5x35fhfazpFewIF6ULaG1VwYmrick/aBAscI4HGXz+mk5R rJL7EZt28WYJPnVquR5v5Ot4U5Lapp99i0MXcHAEDcU+1taGEro/nftWy nLiJ5nYq5H7jcywx6bXU9K4//3C/Xm+zVLshYQrM27KTs3kwC1dYYvzCf CuVGFW0tGqHdtpo8LjNEbQRlQGSun+SR7NiowUSBH3DyhVYVIDGCrkYvQ Zacn1u8QVmvgL9oCFVkui0rMyLQHVSj0St57WDSitSEmwwh/6z4HtqiNl w==; X-CSE-ConnectionGUID: fMXCJYPzTPeniSrCNg1tkw== X-CSE-MsgGUID: FjpvUAO6TJO21yggckecbQ== X-IronPort-AV: E=McAfee;i="6800,10657,11940"; a="1089171" X-IronPort-AV: E=Sophos;i="6.27,168,1787036400"; d="scan'208,217";a="1089171" Received: from orviesa005.jf.intel.com ([10.64.159.145]) by fmvoesa101.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 20 Oct 2026 02:36:17 -0700 X-CSE-ConnectionGUID: xeNDoEXGQ3S8vgKPFgGuWg== X-CSE-MsgGUID: 6/crbxd7SYiHvImW+2SYTA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.27,168,1787036400"; d="scan'208,217";a="2722382" Received: from fmsmsx903.amr.corp.intel.com ([10.18.126.92]) by orviesa005.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 20 Oct 2026 02:36:16 -0700 Received: from FMSMSX901.amr.corp.intel.com (10.18.126.90) by fmsmsx903.amr.corp.intel.com (10.18.126.92) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.49; Tue, 20 Oct 2026 02:36:15 -0700 Received: from fmsedg902.ED.cps.intel.com (10.1.192.144) by FMSMSX901.amr.corp.intel.com (10.18.126.90) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.49 via Frontend Transport; Tue, 20 Oct 2026 02:36:15 -0700 Received: from PH0PR06CU001.outbound.protection.outlook.com (40.107.208.68) by edgegateway.intel.com (192.55.55.82) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.49; Tue, 20 Oct 2026 02:36:15 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=slMHrQPwBvgBxLJfwjNnJHNkEr+Lxndvnn6dEC8X1Htmpa7lKjIRUXsCK74OtNKjus/hZ2GCYUgi3VFUuKWmJQ2Ix6bRL5fP5iZLfYJDEsBOUhC6KwJJTt/7uvQst4Hi6MYkKCyeVqDGoM0Y+jQf9SFLhkwR6A67mI28E/CF/eBzg82Sm6tqtA6nKh6u6uwo7ogqsjdOIcuKni4TrnqtVkC3UzjhgbDIM0WCKjQEF0FNhTyxyRdZlNV05RCmhhtDlXMeA3lk0mtLHT1/09fAOLWIuRJmXzCKGI8FOvZzsxZqWrk8PRDmb2TlnZ7cbExynYCY9nzuOUmmdJ3xqqBKMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=2RbKGmuKEdc+fKHZj3HU8VZG9OjZYDLdfOXxLZbIPAk=; b=cHyhNTBVdyYiC1qOUEIlNlX/nVddoDxHl6PTBTa9j0QYRBMkoe9c5zIUaw7JLdrBpWJDDHqh2IyLmsW5CMov37Ev5zsCe3qqzCEasomjq/NKyOhKK2O/iaItds2hFMHVxPlBSmTaYJLFwoOKtW2VhnGpZYLrQoQeIAD0Ez6CJjAYqmMARSnAMewiQUKW8pjieXBaZbRK6hn3xmdl9jMrYfJlqw3VDfKM/lk/wjFBs+Pxk/w2fPLVBDuHBWiOdDRTdh9xiFAUONakU3PdOcO7aI+PL2iUm1uT18PIZy62llkAHtR+njI/QCet0oQsx1MQyH+v0twg6j7if3SEnBigtw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; Received: from DM8PR11MB5653.namprd11.prod.outlook.com (2603:10b6:8:25::8) by PH8PR11MB6999.namprd11.prod.outlook.com (2603:10b6:510:221::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.522.18; Tue, 20 Oct 2026 09:36:13 +0000 Received: from DM8PR11MB5653.namprd11.prod.outlook.com ([fe80::74e3:c0eb:29ee:fffa]) by DM8PR11MB5653.namprd11.prod.outlook.com ([fe80::74e3:c0eb:29ee:fffa%2]) with mapi id 15.21.0546.012; Tue, 20 Oct 2026 09:36:13 +0000 Content-Type: multipart/alternative; boundary="------------w88JMPllRVC2eyOeoCX8kBt3" Message-ID: Date: Tue, 20 Oct 2026 10:36:07 +0100 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v3 10/10] net/iavf: fix IPsec flow metadata leaks To: Anatoly Burakov , , "Vladimir Medvedkin" , Abhijit Sinha , Jingjing Wu , "Declan Doherty" References: <604dfd252f6979b9cdeb205175e5891b6e9fd665.1792487374.git.anatoly.burakov@intel.com> Content-Language: en-US From: Radu Nicolau In-Reply-To: <604dfd252f6979b9cdeb205175e5891b6e9fd665.1792487374.git.anatoly.burakov@intel.com> X-ClientProxiedBy: DU6P191CA0033.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:53f::8) To SJ0PR11MB5661.namprd11.prod.outlook.com (2603:10b6:a03:3b9::5) X-Archived-By: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DM8PR11MB5653:EE_|PH8PR11MB6999:EE_ X-MS-Office365-Filtering-Correlation-Id: c42eddbd-8765-4cd4-c197-08df2e8d9427 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|376014|366016|23010399003|56012099006|11063799006|261009223027099003|10067099003|18002099003|22082099003|8096899003|3023799007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM8PR11MB5653.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(376014)(366016)(23010399003)(56012099006)(11063799006)(261009223027099003)(10067099003)(18002099003)(22082099003)(8096899003)(3023799007); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?L05rRlpBYUx6MTlxVk1HNkhVbEtFbWlGWmt0MDM1cU50UVlVaTNFNXNBS3d1?= =?utf-8?B?THFvM3NwTi8rR25wdnhqbzZuUFdzaWxFNzNKNGhEVXhtcXl5WCthbUlBaVla?= =?utf-8?B?NUQ0eXI2bVZSbmUrYzFzci85L2JnL1hFaWRxRzNmbzltcHluRlpIWXR0SFl1?= =?utf-8?B?ZDExeXVDbVhzOTF1WG1tQkcvVGloLzQ2M05La2tQeVkxVDY2WTVSNDRnMEFj?= =?utf-8?B?RUxWYVJtTFNqNEtua2ZQUWZSWXJJU0tVSGl0bzBKeFU3SVlsNkI3eHpyWUtj?= =?utf-8?B?Ly9oOVhNSmYxRm9WTFNaNEpEOG9LL055emFVT2o4N0Z3NFp0enQ4THZBNlV5?= =?utf-8?B?cUtmOGVpa240NVZna0NNQzEram9WbWhIQUlMRUFJeG5BejBCMEdSTSsvYVl5?= =?utf-8?B?cE1sZFQ3UmJWL3hJbm96aUJOR0wwTEtqZ0Ivc2VwbDZucWovYVhuUUl0OUty?= =?utf-8?B?WXJEajlXOGI1NnNVaW9XQmh5alR6N1JrWEFWdVlFUlpabWtsQWs1OVV5Wmk1?= =?utf-8?B?UVJ4aEdYS3p4TkRzUVViNlNhZ0dHMVZDYXpzcmNuOVZOeGRmQVY3ek1qeUox?= =?utf-8?B?Y3pyajZxcGIwTHdzOHpvOWQ4THgwVSs0RHRtYnJSbWE3Rzl2MitIbWRaOVdW?= =?utf-8?B?eUZNTzU5ZWxMb2QyMk9aSFU2WWRnOVpwT3NkQmtMVjdKbjZCc0pHVit5WDhs?= =?utf-8?B?NWxscUFrajhCckorMVpkNGhPc294aGI2dHltMExTKzByWnA4cnRSV2h1eTJ0?= =?utf-8?B?THN2TnJsOTVoL3JXclU0OG5lN3hJaTRhbVJvWnF6NUtHbGg0dnVnWHBBN2hx?= =?utf-8?B?QkxLaUhtVWkvN2dFYm1PcUs3ODcxUFl3U0pBVGpRSVJvME4rTTgwRDBid3Y4?= =?utf-8?B?eUk2Q3hDSFhiVkJIVjRoQXZFakM5MzFJN0dmVzdGc3pINlVOdnRTYVZ0TW5h?= =?utf-8?B?MktlOWtnQUdRZzZRZmVHdXg5UFNOZStaei9UaUxjdzFNeDBoMnR5L01VYmFk?= =?utf-8?B?RGQrS0hrYUZFbVYrYVlwSHA2ZTV5WDZuVUFpbmJ2QWVGQTRXcVNCdXlDK0Fs?= =?utf-8?B?MlR4VkIzL01NR0FlRGtnWkMvUjBMcy9lT1h5UHY4YTB6R29rMlVvT21mRSs5?= =?utf-8?B?NTNoZXYvNWpTZXRzeHVZYjF6MEp0SDdiMHFCZFErNVlFR2JqRFFKNHVnemNS?= =?utf-8?B?R1B5ZzJVQWdqb01Fc2Urc0I3NU5kTjJmYzRBdXdlbDI2anNtejU2SldXYmF0?= =?utf-8?B?Zjl4YVpUaU1PaWJmN2hGM3c1K1Z2WUJEem5VbmpEcHZiTkk0L3NxbzBDblRF?= =?utf-8?B?blZLZi9ZU2wrNVpYY2VwWmN6ZG9aenVUZHdaVm0xUTUzTTl4VGpjMndHcExV?= =?utf-8?B?K1AyUkw3am1JdnVKeER6U29aeGtWOUJNK0ZsU01lUjk3SHM4bXRLcTF6WStZ?= =?utf-8?B?L2Ztb2UvVzFrc2pBdG0yRTkrWmh1aVVoejZkdGY1UWtEVThpNzVaaFdFNGpP?= =?utf-8?B?d04zTVlJZlpBUmk1aFVIYlBQQXkyNW8venBUenBINWgrMWo5UCtsbE94RkNC?= =?utf-8?B?MWpkblBZQy9XeEpmQmdGL2xEbnByMGVoUldwdHNCZDAyNjA4V2xHbi9pNlE4?= =?utf-8?B?U2VrUjNVNHZUUW8rMVRudkd6NmpxUGsycnEvWXZQWTEwZmI3dTY4MmdVYXE3?= =?utf-8?B?WG1ZVXhmeXhYTnNOc28yWDI2eUdGeUQ1d0tDQ3JXcklxWWE1NGIyUncxdnRO?= =?utf-8?B?Rk8rUUhBbkNsaVJoS0VwdHI1WHNpNkZIc3RUL3BhYWwyV0djR3d1ZGlsTGZY?= =?utf-8?B?RU51dGdKdjVNQlpMa2I1REJuTzg2ZGZVZC9aOGpLUWhoQjhKY1B2R1JZd0hE?= =?utf-8?B?QzFlSEQybjVMQlkvZzVOMEE0WHZZdzl5NExVZmtBaFhDV3IvTlA1NzJWNGM5?= =?utf-8?B?Nk1FV3R4TFJ3RWgyZ1dUOXVJWmw5NWV1TXZsSHNaK1BEM3d1TjZjV2FacURj?= =?utf-8?B?MUFIampwdjZyeS9yUkxVYUtsZTI4V3lGNkJSRkY1SnFJT0VKYUVVeFlTSmND?= =?utf-8?B?RzhEQkF1UUk2R3JhdUx4SUQxbjJyL3N4dElEaHkzcUU4VlJNWUxMN05jVGs4?= =?utf-8?B?N2doSlJqK1NPOUdkMlo2eU5CdzVva1VvdGUzN3ovaFc4eGxDZnZ6QUEvL2Fu?= =?utf-8?B?MSs2czNXZ2FxdUU4ekNFVXo5U0RqOFl2NDQ1a3hSZzFGNXR3dGNJQkE4OTc4?= =?utf-8?B?N2pNT2FtRW53MWdRQnVISGJrRjFMb01IemgzUTJKODJaY2QxM2hWeEh1cnV2?= =?utf-8?B?UGQ2azVVbCtFSDJ1N1BieXFvQ0RaaG1HSUpMbjN5cWR1QWw5cVgwdz09?= X-Exchange-RoutingPolicyChecked: 3YjnZ/0ZgorVwSoD+GvDnRWJKVEb5JW3fKVTxlsopES11NhItz9b27t0JAWMYIcfPGTkyyULQrqxTFWIme93qMQFVN/Zvf/YqPDYJ21vn+saohugKNyRU+AzY+xPLrb1/jFCQ2HxgDWnJ40CQ6ML7oWS1DXDIaixzKcOlLZbwE8JCnJu4+GahzwumJgI+DInyOJvcDP/SDqCwuzyJjZ/rq4pbkMUyeDl+Zga8eiXnb6vqV77I80uCXcANORPK3baOnSO3v57mv8h31Hmpo/CpEW6pXyKmdP3EAWM5qZLZB5eP3se/dnKzwEfCZBYY3tg1QnJlTtaekUfVHgUND5+BA== X-MS-Exchange-CrossTenant-Network-Message-Id: c42eddbd-8765-4cd4-c197-08df2e8d9427 X-MS-Exchange-CrossTenant-AuthSource: SJ0PR11MB5661.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 09:36:13.0489 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: w6TRyX9DVcd/HL+NmXwgcEwYwHtvlLlJiVLxbZVW32jzcpFi2nEbDMYoMxPsYKj+g7urWIPkEXaL6NYp1Ug9Cg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR11MB6999 X-OriginatorOrg: intel.com X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Archive: List-Post: List-Help: List-Subscribe: , X-Spam-Status: No, score=-9.6 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE,INCLUDES_CR_TRAILER,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,USER_AGENT_SANE_1 autolearn=ham autolearn_force=no version=4.0.1 X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on aws-us-west-2-korg-listserv-alma10-1 --------------w88JMPllRVC2eyOeoCX8kBt3 Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: 7bit On 20-Oct-26 10:11 AM, Anatoly Burakov wrote: > IPsec flow parsing leaves the pattern-match item allocated after > extracting its metadata. It also leaves the parsed flow item allocated > when no metadata output is requested. > > Free the pattern-match item after parsing and free the parsed flow item > when it cannot be returned to the caller. Propagate pattern-match failure > and report a parsing error when no flow item was produced. > > Fixes: 6bc987ecb860 ("net/iavf: support IPsec inline crypto") > Cc:stable@dpdk.org > > Signed-off-by: Anatoly Burakov > --- Acked-by: Radu Nicolau --------------w88JMPllRVC2eyOeoCX8kBt3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 7bit


On 20-Oct-26 10:11 AM, Anatoly Burakov wrote:
IPsec flow parsing leaves the pattern-match item allocated after
extracting its metadata. It also leaves the parsed flow item allocated
when no metadata output is requested.

Free the pattern-match item after parsing and free the parsed flow item
when it cannot be returned to the caller. Propagate pattern-match failure
and report a parsing error when no flow item was produced.

Fixes: 6bc987ecb860 ("net/iavf: support IPsec inline crypto")
Cc: stable@dpdk.org

Signed-off-by: Anatoly Burakov <anatoly.burakov@intel.com>
---

Acked-by: Radu Nicolau <radu.nicolau@intel.com>

--------------w88JMPllRVC2eyOeoCX8kBt3--