On 6/28/2024 10:01 PM, Mihai Brodschi wrote:
> rte_pktmbuf_alloc_bulk is called by the zero-copy receiver to allocate
> new mbufs to be provided to the sender. The allocated mbuf pointers
> are stored in a ring, but the alloc function doesn't implement index
> wrap-around, so it writes past the end of the array. This results in
> memory corruption and duplicate mbufs being received.
>
> Allocate 2x the space for the mbuf ring, so that the alloc function
> has a contiguous array to write to, then copy the excess entries
> to the start of the array.
>
> Fixes: 43b815d88188 ("net/memif: support zero-copy slave")
> Cc: [email protected]
>
> Signed-off-by: Mihai Brodschi <[email protected]>
>
Reviewed-by: Ferruh Yigit <[email protected]>
Applied to dpdk-next-net/main, thanks.
