evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

net: rmnet_data: Disable generic receive offload by default

Browse source 
Generic receive offload is enabled by default on a net_device
whenever it is registered. In case of rmnet_data, a physical
device could theoretically pass cloned frames and rmnet_data
would pass on these cloned frames to GRO framework. This
would cause memory corruption or crashes since GRO modifies
the skb shared info which is shared across clones.

While cloned frames are usually not sent to rmnet_data, this
configuration actually requires userspace intervention. If
userspace does not makes appropriate calls to kernel, we will
run into crashes. Handle this scenario by disabling GRO by
default. Userspace will need to explicitly enable GRO if
required to do so.

CRs-Fixed: 1097389
Change-Id: I40d5ce940f4722b128c0138c07232c33d0b74e14
Signed-off-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
This commit is contained in:
Subash Abhinov Kasiviswanathan 2016-12-05 12:26:41 -07:00 • committed by Gerrit - the friendly Code Review server
parent 368fecd7df
commit 90c133c67c
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
net/rmnet_data/rmnet_data_vnd.c
View file

@ -504,6 +504,18 @@ static void rmnet_vnd_setup(struct net_device *dev)
INIT_LIST_HEAD(&dev_conf->flow_head);
}
/**
* rmnet_vnd_setup() - net_device initialization helper function
* @dev: Virtual network device
*
* Called during device initialization. Disables GRO.
*/
static void rmnet_vnd_disable_offload(struct net_device *dev)
{
dev->wanted_features &= ~NETIF_F_GRO;
__netdev_update_features(dev);
}
/* ***************** Exposed API ******************************************** */
/**
@ -616,6 +628,8 @@ int rmnet_vnd_create_dev(int id, struct net_device **new_device,
*new_device = dev;
}
rmnet_vnd_disable_offload(dev);
LOGM("Registered device %s", dev->name);
return rc;
}