Author: slavash
Date: Wed Dec  5 13:22:07 2018
New Revision: 341528
URL: https://svnweb.freebsd.org/changeset/base/341528

Log:
  ibcore: Always check return value from ib_init_ah_from_wc().
  
  This prevents code from accepting RoCEv1 connections when
  only ROCEv2 is enabled and vice versa.
  
  Linux commit:
  0c4386ec77cfcd0ccbdbe8c2e67dd3a49b2a4c7f
  
  Submitted by:   hselasky@
  Approved by:    hselasky (mentor)
  MFC after:      1 week
  Sponsored by:   Mellanox Technologies

Modified:
  head/sys/ofed/drivers/infiniband/core/ib_cm.c
  head/sys/ofed/drivers/infiniband/core/ib_user_mad.c

Modified: head/sys/ofed/drivers/infiniband/core/ib_cm.c
==============================================================================
--- head/sys/ofed/drivers/infiniband/core/ib_cm.c       Wed Dec  5 13:21:20 
2018        (r341527)
+++ head/sys/ofed/drivers/infiniband/core/ib_cm.c       Wed Dec  5 13:22:07 
2018        (r341528)
@@ -390,13 +390,13 @@ static void cm_set_private_data(struct cm_id_private *
        cm_id_priv->private_data_len = private_data_len;
 }
 
-static void cm_init_av_for_response(struct cm_port *port, struct ib_wc *wc,
-                                   struct ib_grh *grh, struct cm_av *av)
+static int cm_init_av_for_response(struct cm_port *port, struct ib_wc *wc,
+                                  struct ib_grh *grh, struct cm_av *av)
 {
        av->port = port;
        av->pkey_index = wc->pkey_index;
-       ib_init_ah_from_wc(port->cm_dev->ib_device, port->port_num, wc,
-                          grh, &av->ah_attr);
+       return ib_init_ah_from_wc(port->cm_dev->ib_device, port->port_num, wc,
+                                 grh, &av->ah_attr);
 }
 
 static int cm_init_av_by_path(struct ib_sa_path_rec *path, struct cm_av *av,
@@ -1678,9 +1678,11 @@ static int cm_req_handler(struct cm_work *work)
 
        cm_id_priv = container_of(cm_id, struct cm_id_private, id);
        cm_id_priv->id.remote_id = req_msg->local_comm_id;
-       cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
-                               work->mad_recv_wc->recv_buf.grh,
-                               &cm_id_priv->av);
+       ret = cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
+                                     work->mad_recv_wc->recv_buf.grh,
+                                     &cm_id_priv->av);
+       if (ret)
+               goto destroy;
        cm_id_priv->timewait_info = cm_create_timewait_info(cm_id_priv->
                                                            id.local_id);
        if (IS_ERR(cm_id_priv->timewait_info)) {
@@ -2905,9 +2907,11 @@ static int cm_lap_handler(struct cm_work *work)
 
        cm_id_priv->id.lap_state = IB_CM_LAP_RCVD;
        cm_id_priv->tid = lap_msg->hdr.tid;
-       cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
-                               work->mad_recv_wc->recv_buf.grh,
-                               &cm_id_priv->av);
+       ret = cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
+                                     work->mad_recv_wc->recv_buf.grh,
+                                     &cm_id_priv->av);
+       if (ret)
+               goto unlock;
        ret = cm_init_av_by_path(param->alternate_path, &cm_id_priv->alt_av,
                                 cm_id_priv);
        if (ret)
@@ -3164,6 +3168,7 @@ static int cm_sidr_req_handler(struct cm_work *work)
        struct cm_id_private *cm_id_priv, *cur_cm_id_priv;
        struct cm_sidr_req_msg *sidr_req_msg;
        struct ib_wc *wc;
+       int ret;
 
        cm_id = ib_create_cm_id(work->port->cm_dev->ib_device, NULL, NULL);
        if (IS_ERR(cm_id))
@@ -3176,9 +3181,11 @@ static int cm_sidr_req_handler(struct cm_work *work)
        wc = work->mad_recv_wc->wc;
        cm_id_priv->av.dgid.global.subnet_prefix = cpu_to_be64(wc->slid);
        cm_id_priv->av.dgid.global.interface_id = 0;
-       cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
-                               work->mad_recv_wc->recv_buf.grh,
-                               &cm_id_priv->av);
+       ret = cm_init_av_for_response(work->port, work->mad_recv_wc->wc,
+                                     work->mad_recv_wc->recv_buf.grh,
+                                     &cm_id_priv->av);
+       if (ret)
+               goto out;
        cm_id_priv->id.remote_id = sidr_req_msg->request_id;
        cm_id_priv->tid = sidr_req_msg->hdr.tid;
        atomic_inc(&cm_id_priv->work_count);

Modified: head/sys/ofed/drivers/infiniband/core/ib_user_mad.c
==============================================================================
--- head/sys/ofed/drivers/infiniband/core/ib_user_mad.c Wed Dec  5 13:21:20 
2018        (r341527)
+++ head/sys/ofed/drivers/infiniband/core/ib_user_mad.c Wed Dec  5 13:22:07 
2018        (r341528)
@@ -240,10 +240,13 @@ static void recv_handler(struct ib_mad_agent *agent,
        packet->mad.hdr.grh_present = !!(mad_recv_wc->wc->wc_flags & IB_WC_GRH);
        if (packet->mad.hdr.grh_present) {
                struct ib_ah_attr ah_attr;
+               int ret;
 
-               ib_init_ah_from_wc(agent->device, agent->port_num,
-                                  mad_recv_wc->wc, mad_recv_wc->recv_buf.grh,
-                                  &ah_attr);
+               ret = ib_init_ah_from_wc(agent->device, agent->port_num,
+                                        mad_recv_wc->wc, 
mad_recv_wc->recv_buf.grh,
+                                        &ah_attr);
+               if (ret)
+                       goto err2;
 
                packet->mad.hdr.gid_index = ah_attr.grh.sgid_index;
                packet->mad.hdr.hop_limit = ah_attr.grh.hop_limit;
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "[email protected]"

Reply via email to