git: f02d9edfb5d6 - main - ktls: Mark mbufs containing outbound encrypted TLS records read-only

[John Baldwin]

The branch main has been updated by jhb:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=f02d9edfb5d695734b8866c81d2da0c7700c8779

commit f02d9edfb5d695734b8866c81d2da0c7700c8779
Author:     John Baldwin <j...@freebsd.org>
AuthorDate: 2024-10-31 20:32:32 +0000
Commit:     John Baldwin <j...@freebsd.org>
CommitDate: 2024-10-31 20:32:32 +0000

    ktls: Mark mbufs containing outbound encrypted TLS records read-only
    
    Reviewed by:    gallatin, kp
    Differential Revision:  https://reviews.freebsd.org/D46784
---
 sys/kern/uipc_ktls.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/kern/uipc_ktls.c b/sys/kern/uipc_ktls.c
index 1e4a933d4e4f..bf2ff37e3c3a 100644
--- a/sys/kern/uipc_ktls.c
+++ b/sys/kern/uipc_ktls.c
@@ -3072,6 +3072,7 @@ ktls_encrypt(struct ktls_wq *wq, struct mbuf *top)
 
                if ((m->m_epg_flags & EPG_FLAG_ANON) == 0)
                        ktls_finish_nonanon(m, &state);
+               m->m_flags |= M_RDONLY;
 
                npages += m->m_epg_nrdy;
 
@@ -3110,6 +3111,7 @@ ktls_encrypt_cb(struct ktls_ocf_encrypt_state *state, int 
error)
 
        if ((m->m_epg_flags & EPG_FLAG_ANON) == 0)
                ktls_finish_nonanon(m, state);
+       m->m_flags |= M_RDONLY;
 
        so = state->so;
        free(state, M_KTLS);