[PATCH v3 nf 0/3] nft_set_pipapo: fix incorrect avx2 match of 5th field octet

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Sontu Mazumdar reports incorrect matching in the pipapo set type.

1st patch fixes the reported issue.
2nd patch adds a test case.
3rd patch adds debug infrastructure (conditional for CONFIG_DEBUG_NET)
to add avx register tracking.

I checked that selftest passes with all three patches applied, that the
new selftest fails without the fix and that the register tracking added
in patch 1 also produces a WARN splat.

Changes since v2:
- reverse order, fix first, debug infra last
- fix and test are unchanged
- debug patch adds new 'last pass' to check that
  all registers were processed.

Florian Westphal (3):
  nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  selftests: netfilter: add test case for recent mismatch bug
  nft_set_pipapo: add avx register usage tracking for NET_DEBUG builds

 net/netfilter/nft_set_pipapo_avx2.c           | 303 ++++++++++++++++--
 .../net/netfilter/nft_concat_range.sh         |  39 ++-
 2 files changed, 309 insertions(+), 33 deletions(-)
-- 
2.49.0




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux