1. 01 11月, 2017 1 次提交
  2. 27 10月, 2017 1 次提交
  3. 15 10月, 2017 3 次提交
  4. 11 10月, 2017 1 次提交
  5. 06 9月, 2017 2 次提交
  6. 29 8月, 2017 1 次提交
    • S
      cxgb4: Fix stack out-of-bounds read due to wrong size to t4_record_mbox() · 0f308686
      Stefano Brivio 提交于
      Passing commands for logging to t4_record_mbox() with size
      MBOX_LEN, when the actual command size is actually smaller,
      causes out-of-bounds stack accesses in t4_record_mbox() while
      copying command words here:
      
      	for (i = 0; i < size / 8; i++)
      		entry->cmd[i] = be64_to_cpu(cmd[i]);
      
      Up to 48 bytes from the stack are then leaked to debugfs.
      
      This happens whenever we send (and log) commands described by
      structs fw_sched_cmd (32 bytes leaked), fw_vi_rxmode_cmd (48),
      fw_hello_cmd (48), fw_bye_cmd (48), fw_initialize_cmd (48),
      fw_reset_cmd (48), fw_pfvf_cmd (32), fw_eq_eth_cmd (16),
      fw_eq_ctrl_cmd (32), fw_eq_ofld_cmd (32), fw_acl_mac_cmd(16),
      fw_rss_glb_config_cmd(32), fw_rss_vi_config_cmd(32),
      fw_devlog_cmd(32), fw_vi_enable_cmd(48), fw_port_cmd(32),
      fw_sched_cmd(32), fw_devlog_cmd(32).
      
      The cxgb4vf driver got this right instead.
      
      When we call t4_record_mbox() to log a command reply, a MBOX_LEN
      size can be used though, as get_mbox_rpl() will fill cmd_rpl up
      completely.
      
      Fixes: 7f080c3f ("cxgb4: Add support to enable logging of firmware mailbox commands")
      Signed-off-by: NStefano Brivio <sbrivio@redhat.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      0f308686
  7. 21 8月, 2017 1 次提交
  8. 09 8月, 2017 1 次提交
  9. 30 7月, 2017 1 次提交
  10. 21 7月, 2017 1 次提交
  11. 20 7月, 2017 1 次提交
  12. 24 6月, 2017 2 次提交
  13. 14 6月, 2017 1 次提交
  14. 10 6月, 2017 1 次提交
  15. 09 6月, 2017 1 次提交
  16. 03 6月, 2017 1 次提交
  17. 31 5月, 2017 2 次提交
  18. 22 5月, 2017 1 次提交
  19. 09 5月, 2017 1 次提交
  20. 23 3月, 2017 1 次提交
  21. 17 1月, 2017 1 次提交
  22. 14 1月, 2017 1 次提交
  23. 07 1月, 2017 2 次提交
    • G
      cxgb4: Add port description for new cards. · 89eb9835
      Ganesh Goudar 提交于
      Add port description for 25G and 100G cards, and also
      change few port descriptions in compliance with the new
      naming convention.
      Signed-off-by: NGanesh Goudar <ganeshgr@chelsio.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      89eb9835
    • H
      cxgb4: Synchronize access to mailbox · 4055ae5e
      Hariprasad Shenai 提交于
      The issue comes when there are multiple threads attempting to use
      the mailbox facility at the same time.
      When DCB operations and interface up/down is run in a loop for every
      0.1 sec, we observed mailbox collisions. And out of the two commands
      one would fail with the present code, since we don't queue the second
      command.
      
      To overcome the above issue, added a queue to access the mailbox.
      Whenever a mailbox command is issued add it to the queue. If its at
      the head issue the mailbox command, else wait for the existing command
      to complete. Usually command takes less than a milli-second to
      complete.
      
      Also timeout from the loop, if the command under execution takes
      long time to run.
      
      In reality, the number of mailbox access collisions is going to be
      very rare since no one runs such abusive script.
      Signed-off-by: NHariprasad Shenai <hariprasad@chelsio.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      4055ae5e
  24. 05 1月, 2017 1 次提交
  25. 09 12月, 2016 1 次提交
  26. 21 9月, 2016 1 次提交
  27. 05 9月, 2016 1 次提交
  28. 23 8月, 2016 1 次提交
  29. 15 8月, 2016 1 次提交
  30. 26 7月, 2016 1 次提交
  31. 05 5月, 2016 2 次提交
  32. 30 4月, 2016 1 次提交
  33. 27 4月, 2016 1 次提交