Page MenuHomeFreeBSD

gve: Fix Tx tcpdump panic
ClosedPublic

Authored by shailend_google.com on Jul 26 2023, 12:37 AM.
Tags
None
Referenced Files
F153958523: D41189.id125166.diff
Sat, Apr 25, 2:38 AM
Unknown Object (File)
Mon, Apr 20, 4:24 AM
Unknown Object (File)
Mon, Apr 20, 4:21 AM
Unknown Object (File)
Wed, Apr 15, 7:50 AM
Unknown Object (File)
Sun, Apr 12, 4:17 PM
Unknown Object (File)
Sat, Apr 11, 4:02 AM
Unknown Object (File)
Tue, Apr 7, 12:52 PM
Unknown Object (File)
Mon, Apr 6, 12:27 PM
Subscribers
None

Details

Summary

Ringing the doorbell before making the BPF call can result in the
mbuf being freed before the BPF call.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

shailend_google.com created this revision.
sys/dev/gve/gve_tx.c
709

BTW, this usage of drbr looks like it could be a bit simpler:

while ((if_getdrvflags(ifp) & IFF_DRV_RUNNING) != 0 && (m = drbr_peek()) != NULL) {
    if (gve_xmit(tx, mbuf) != 0) {
        ...
    }
    drbr_advance(ifp, tx->br);
    ...
}

Right now we're needlessly checking for an empty ring in drbr_peek() after having already done so with drbr_empty().

This revision is now accepted and ready to land.Jul 26 2023, 2:33 PM
This revision was automatically updated to reflect the committed changes.