> -----Original Message----- > From: Björn Töpel [mailto:bjorn.to...@gmail.com] > Sent: Tuesday, August 25, 2020 5:16 PM > To: jeffrey.t.kirs...@intel.com; intel-wired-...@lists.osuosl.org > Cc: Björn Töpel <bjorn.to...@intel.com>; magnus.karls...@intel.com; > magnus.karls...@gmail.com; netdev@vger.kernel.org; > maciej.fijalkow...@intel.com; piotr.raczyn...@intel.com; > maciej.machnikow...@intel.com; Li,Rongqing <lirongq...@baidu.com> > Subject: [PATCH net 3/3] ice: avoid premature Rx buffer reuse > > From: Björn Töpel <bjorn.to...@intel.com> > > The page recycle code, incorrectly, relied on that a page fragment could not > be > freed inside xdp_do_redirect(). This assumption leads to that page fragments > that are used by the stack/XDP redirect can be reused and overwritten. > > To avoid this, store the page count prior invoking xdp_do_redirect(). > > Fixes: efc2214b6047 ("ice: Add support for XDP") > Signed-off-by: Björn Töpel <bjorn.to...@intel.com>
Reported-and-analyzed-by: Li RongQing <lirongq...@baidu.com> Thanks -Li
