lkml.org 
[lkml]   [2018]   [Feb]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Date
    Subject[PATCH 3.16 033/136] l2tp: don't register sessions in l2tp_session_create()
    3.16.54-rc1 review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Guillaume Nault <g.nault@alphalink.fr>

    commit 3953ae7b218df4d1e544b98a393666f9ae58a78c upstream.

    Sessions created by l2tp_session_create() aren't fully initialised:
    some pseudo-wire specific operations need to be done before making the
    session usable. Therefore the PPP and Ethernet pseudo-wires continue
    working on the returned l2tp session while it's already been exposed to
    the rest of the system.
    This can lead to various issues. In particular, the session may enter
    the deletion process before having been fully initialised, which will
    confuse the session removal code.

    This patch moves session registration out of l2tp_session_create(), so
    that callers can control when the session is exposed to the rest of the
    system. This is done by the new l2tp_session_register() function.

    Only pppol2tp_session_create() can be easily converted to avoid
    modifying its session after registration (the debug message is dropped
    in order to avoid the need for holding a reference on the session).

    For pppol2tp_connect() and l2tp_eth_create()), more work is needed.
    That'll be done in followup patches. For now, let's just register the
    session right after its creation, like it was done before. The only
    difference is that we can easily take a reference on the session before
    registering it, so, at least, we're sure it's not going to be freed
    while we're working on it.

    Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    [bwh: Backported to 3.16: adjust context]
    Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
    ---
    net/l2tp/l2tp_core.c | 21 +++++++--------------
    net/l2tp/l2tp_core.h | 3 +++
    net/l2tp/l2tp_eth.c | 9 +++++++++
    net/l2tp/l2tp_ppp.c | 23 +++++++++++++++++------
    4 files changed, 36 insertions(+), 20 deletions(-)

    --- a/net/l2tp/l2tp_core.c
    +++ b/net/l2tp/l2tp_core.c
    @@ -370,8 +370,8 @@ struct l2tp_session *l2tp_session_get_by
    }
    EXPORT_SYMBOL_GPL(l2tp_session_get_by_ifname);

    -static int l2tp_session_add_to_tunnel(struct l2tp_tunnel *tunnel,
    - struct l2tp_session *session)
    +int l2tp_session_register(struct l2tp_session *session,
    + struct l2tp_tunnel *tunnel)
    {
    struct l2tp_session *session_walk;
    struct hlist_head *g_head;
    @@ -419,6 +419,10 @@ static int l2tp_session_add_to_tunnel(st
    hlist_add_head(&session->hlist, head);
    write_unlock_bh(&tunnel->hlist_lock);

    + /* Ignore management session in session count value */
    + if (session->session_id != 0)
    + atomic_inc(&l2tp_session_count);
    +
    return 0;

    err_tlock_pnlock:
    @@ -428,6 +432,7 @@ err_tlock:

    return err;
    }
    +EXPORT_SYMBOL_GPL(l2tp_session_register);

    /* Lookup a tunnel by id
    */
    @@ -1868,7 +1873,6 @@ EXPORT_SYMBOL_GPL(l2tp_session_set_heade
    struct l2tp_session *l2tp_session_create(int priv_size, struct l2tp_tunnel *tunnel, u32 session_id, u32 peer_session_id, struct l2tp_session_cfg *cfg)
    {
    struct l2tp_session *session;
    - int err;

    session = kzalloc(sizeof(struct l2tp_session) + priv_size, GFP_KERNEL);
    if (session != NULL) {
    @@ -1926,17 +1930,6 @@ struct l2tp_session *l2tp_session_create

    l2tp_session_inc_refcount(session);

    - err = l2tp_session_add_to_tunnel(tunnel, session);
    - if (err) {
    - kfree(session);
    -
    - return ERR_PTR(err);
    - }
    -
    - /* Ignore management session in session count value */
    - if (session->session_id != 0)
    - atomic_inc(&l2tp_session_count);
    -
    return session;
    }

    --- a/net/l2tp/l2tp_core.h
    +++ b/net/l2tp/l2tp_core.h
    @@ -274,6 +274,9 @@ struct l2tp_session *l2tp_session_create
    struct l2tp_tunnel *tunnel,
    u32 session_id, u32 peer_session_id,
    struct l2tp_session_cfg *cfg);
    +int l2tp_session_register(struct l2tp_session *session,
    + struct l2tp_tunnel *tunnel);
    +
    void __l2tp_session_unhash(struct l2tp_session *session);
    int l2tp_session_delete(struct l2tp_session *session);
    void l2tp_session_free(struct l2tp_session *session);
    --- a/net/l2tp/l2tp_eth.c
    +++ b/net/l2tp/l2tp_eth.c
    @@ -217,6 +217,13 @@ static int l2tp_eth_create(struct net *n
    goto out;
    }

    + l2tp_session_inc_refcount(session);
    + rc = l2tp_session_register(session, tunnel);
    + if (rc < 0) {
    + kfree(session);
    + goto out;
    + }
    +
    dev = alloc_netdev(sizeof(*priv), name, l2tp_eth_dev_setup);
    if (!dev) {
    rc = -ENOMEM;
    @@ -250,6 +257,7 @@ static int l2tp_eth_create(struct net *n
    __module_get(THIS_MODULE);
    /* Must be done after register_netdev() */
    strlcpy(session->ifname, dev->name, IFNAMSIZ);
    + l2tp_session_dec_refcount(session);

    dev_hold(dev);

    @@ -260,6 +268,7 @@ out_del_dev:
    spriv->dev = NULL;
    out_del_session:
    l2tp_session_delete(session);
    + l2tp_session_dec_refcount(session);
    out:
    return rc;
    }
    --- a/net/l2tp/l2tp_ppp.c
    +++ b/net/l2tp/l2tp_ppp.c
    @@ -737,6 +737,14 @@ static int pppol2tp_connect(struct socke
    error = PTR_ERR(session);
    goto end;
    }
    +
    + l2tp_session_inc_refcount(session);
    + error = l2tp_session_register(session, tunnel);
    + if (error < 0) {
    + kfree(session);
    + goto end;
    + }
    + drop_refcnt = true;
    }

    /* Associate session with its PPPoL2TP socket */
    @@ -824,7 +832,7 @@ static int pppol2tp_session_create(struc
    /* Error if tunnel socket is not prepped */
    if (!tunnel->sock) {
    error = -ENOENT;
    - goto out;
    + goto err;
    }

    /* Default MTU values. */
    @@ -839,18 +847,21 @@ static int pppol2tp_session_create(struc
    peer_session_id, cfg);
    if (IS_ERR(session)) {
    error = PTR_ERR(session);
    - goto out;
    + goto err;
    }

    ps = l2tp_session_priv(session);
    ps->tunnel_sock = tunnel->sock;

    - l2tp_info(session, PPPOL2TP_MSG_CONTROL, "%s: created\n",
    - session->name);
    -
    - error = 0;
    -
    -out:
    + error = l2tp_session_register(session, tunnel);
    + if (error < 0)
    + goto err_sess;
    +
    + return 0;
    +
    +err_sess:
    + kfree(session);
    +err:
    return error;
    }

    \
     
     \ /
      Last update: 2018-02-11 05:41    [W:4.115 / U:0.800 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site