• David Howells's avatar
    rxrpc: Fix the data_ready handler · 2cfa2271
    David Howells authored
    Fix the rxrpc_data_ready() function to pick up all packets and to not miss
    any.  There are two problems:
    
     (1) The sk_data_ready pointer on the UDP socket is set *after* it is
         bound.  This means that it's open for business before we're ready to
         dequeue packets and there's a tiny window exists in which a packet can
         sneak onto the receive queue, but we never know about it.
    
         Fix this by setting the pointers on the socket prior to binding it.
    
     (2) skb_recv_udp() will return an error (such as ENETUNREACH) if there was
         an error on the transmission side, even though we set the
         sk_error_report hook.  Because rxrpc_data_ready() returns immediately
         in such a case, it never actually removes its packet from the receive
         queue.
    
         Fix this by abstracting out the UDP dequeuing and checksumming into a
         separate function that keeps hammering on skb_recv_udp() until it
         returns -EAGAIN, passing the packets extracted to the remainder of the
         function.
    
    and two potential problems:
    
     (3) It might be possible in some circumstances or in the future for
         packets to be being added to the UDP receive queue whilst rxrpc is
         running consuming them, so the data_ready() handler might get called
         less often than once per packet.
    
         Allow for this by fully draining the queue on each call as (2).
    
     (4) If a packet fails the checksum check, the code currently returns after
         discarding the packet without checking for more.
    
         Allow for this by fully draining the queue on each call as (2).
    
    Fixes: 17926a79 ("[AF_RXRPC]: Provide secure RxRPC sockets for use by userspace and kernel both")
    Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
    Acked-by: default avatarPaolo Abeni <pabeni@redhat.com>
    2cfa2271
input.c 36.5 KB