On Fri, Nov 13, 2020 at 05:42:46PM -0800, Jakub Kicinski wrote:
> On Wed, 11 Nov 2020 20:37:31 +0100 Pablo Neira Ayuso wrote:
> > +int dev_fill_forward_path(const struct net_device *dev, const u8 *daddr,
> > + struct net_device_path_stack *stack)
> > +{
> > + const struct net_device *last_dev;
> > + struct net_device_path_ctx ctx;
> > + struct net_device_path *path;
> > + int ret = 0;
> > +
> > + memset(&ctx, 0, sizeof(ctx));
> > + ctx.dev = dev;
> > + ctx.daddr = daddr;
> > +
> > + while (ctx.dev && ctx.dev->netdev_ops->ndo_fill_forward_path) {
> > + last_dev = ctx.dev;
> > +
> > + path = &stack->path[stack->num_paths++];
>
> I don't see you checking that this stack doesn't overflow.
>
> What am I missing?
Yes, this check in missing indeed.
I'll fix it and will include it in the next patchset version including
Nikolay's request.
Thank you.