From mboxrd@z Thu Jan 1 00:00:00 1970 From: Daniel Borkmann Subject: Re: [PATCH net 1/1] net: ppp: don't call sk_chk_filter twice Date: Sun, 13 Jul 2014 20:56:05 +0200 Message-ID: <53C2D645.3070102@redhat.com> References: <53C28335.9090902@kristov.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit Cc: netdev@vger.kernel.org, linux-ppp@vger.kernel.org, paulus@samba.org, isdn@linux-pingi.de, ast@plumgrid.com To: Christoph Schulz Return-path: In-Reply-To: <53C28335.9090902@kristov.de> Sender: linux-ppp-owner@vger.kernel.org List-Id: netdev.vger.kernel.org On 07/13/2014 03:01 PM, Christoph Schulz wrote: > From: Christoph Schulz > > Commit 568f194e8bd16c353ad50f9ab95d98b20578a39d ("net: ppp: use > sk_unattached_filter api") causes sk_chk_filter() to be called twice when > setting a PPP pass or active filter. This applies to both the generic PPP > subsystem implemented by drivers/net/ppp/ppp_generic.c and the ISDN PPP > subsystem implemented by drivers/isdn/i4l/isdn_ppp.c. The first call is from > within get_filter(). The second one is through the call chain > > ppp_ioctl() or isdn_ppp_ioctl() > --> sk_unattached_filter_create() > --> __sk_prepare_filter() > --> sk_chk_filter() > > The first call from within get_filter() should be deleted as get_filter() is > called just before calling sk_unattached_filter_create() later on, which > eventually calls sk_chk_filter() anyway. > > For 3.15.x, this proposed change is a bugfix rather than a pure optimization as > in that branch, sk_chk_filter() may replace filter codes by other codes which > are not recognized when executing sk_chk_filter() a second time. So with > 3.15.x, if sk_chk_filter() is called twice, the second invocation may yield > EINVAL (this depends on the filter codes found in the filter to be set, but > because the replacement is done for frequently used codes, this is almost > always the case). The net effect is that setting pass and/or active PPP filters > does not work anymore, since sk_unattached_filter_create() always returns > EINVAL due to the second call to sk_chk_filter(), regardless whether the filter > was originally sane or not. > > Signed-off-by: Christoph Schulz Looking at [1]'s mbox, it seems to me your patch is corrupted by your email client (the last chunk not recognized) ... perhaps try to send it by using git-send-email(1). Other than that, it's fine. [1] http://patchwork.ozlabs.org/patch/369404/