> -----Original Message-----
> From: Intel-wired-lan <[email protected]> On Behalf Of
> Marcin Szycik
> Sent: Tuesday, April 9, 2024 9:16 PM
> To: [email protected]
> Cc: [email protected]; Marcin Szycik <[email protected]>;
> Michal Swiatkowski <[email protected]>
> Subject: [Intel-wired-lan] [PATCH iwl-net] ice: Fix checking for unsupported
> keys on non-tunnel device
>
> Add missing FLOW_DISSECTOR_KEY_ENC_* checks to TC flower filter parsing.
> Without these checks, it would be possible to add filters with tunnel options
> on non-tunnel devices. enc_* options are only valid for tunnel devices.
>
> Example:
> devlink dev eswitch set $PF1_PCI mode switchdev
> echo 1 > /sys/class/net/$PF1/device/sriov_numvfs
> tc qdisc add dev $VF1_PR ingress
> ethtool -K $PF1 hw-tc-offload on
> tc filter add dev $VF1_PR ingress flower enc_ttl 12 skip_sw action drop
>
> Fixes: 9e300987d4a8 ("ice: VXLAN and Geneve TC support")
> Reviewed-by: Michal Swiatkowski <[email protected]>
> Signed-off-by: Marcin Szycik <[email protected]>
> ---
> drivers/net/ethernet/intel/ice/ice_tc_lib.c | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
Tested-by: Sujai Buvaneswaran <[email protected]>
