• Davide Caratti's avatar
    net/sched: fix idr leak in the error path of tcf_vlan_init() · d7f20015
    Davide Caratti authored
    tcf_vlan_init() can fail after the idr has been successfully reserved.
    When this happens, every subsequent attempt to configure vlan rules using
    the same idr value will systematically fail with -ENOSPC, unless the first
    attempt was done using the 'replace' keyword.
    
     # tc action add action vlan pop index 100
     RTNETLINK answers: Cannot allocate memory
     We have an error talking to the kernel
     # tc action add action vlan pop index 100
     RTNETLINK answers: No space left on device
     We have an error talking to the kernel
     # tc action add action vlan pop index 100
     RTNETLINK answers: No space left on device
     We have an error talking to the kernel
     ...
    
    Fix this in tcf_vlan_init(), ensuring that tcf_idr_release() is called on
    the error path when the idr has been reserved, but not yet inserted. Also,
    don't test 'ovr' in the error path, to avoid a 'replace' failure implicitly
    become a 'delete' that leaks refcount in act_vlan module:
    
     # rmmod act_vlan; modprobe act_vlan
     # tc action add action vlan push id 5 index 100
     # tc action replace action vlan push id 7 index 100
     RTNETLINK answers: Cannot allocate memory
     We have an error talking to the kernel
     # tc action list action vlan
     #
     # rmmod act_vlan
     rmmod: ERROR: Module act_vlan is in use
    
    Fixes: 4c5b9d96 ("act_vlan: VLAN action rewrite to use RCU lock/unlock and update")
    Fixes: 65a206c0 ("net/sched: Change act_api and act_xxx modules to use IDR")
    Acked-by: default avatarJamal Hadi Salim <jhs@mojatatu.com>
    Signed-off-by: default avatarDavide Caratti <dcaratti@redhat.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    d7f20015
act_vlan.c 7.74 KB