This is a note to let you know that I've just added the patch titled
vdpa: Enable strict validation for netlinks ops
to the 6.4-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
vdpa-enable-strict-validation-for-netlinks-ops.patch
and it can be found in the queue-6.4 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From f46c1e1620c6bbc9aad5693082efd1b80822e97c Mon Sep 17 00:00:00 2001
From: Dragos Tatulea <dtatulea@xxxxxxxxxx>
Date: Thu, 27 Jul 2023 20:57:54 +0300
Subject: vdpa: Enable strict validation for netlinks ops
From: Dragos Tatulea <dtatulea@xxxxxxxxxx>
commit f46c1e1620c6bbc9aad5693082efd1b80822e97c upstream.
The previous patches added the missing nla policies that were required for
validation to work.
Now strict validation on netlink ops can be enabled. This patch does it.
Signed-off-by: Dragos Tatulea <dtatulea@xxxxxxxxxx>
Cc: stable@xxxxxxxxxxxxxxx
Message-Id: <20230727175757.73988-9-dtatulea@xxxxxxxxxx>
Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
drivers/vdpa/vdpa.c | 6 ------
1 file changed, 6 deletions(-)
--- a/drivers/vdpa/vdpa.c
+++ b/drivers/vdpa/vdpa.c
@@ -1257,37 +1257,31 @@ static const struct nla_policy vdpa_nl_p
static const struct genl_ops vdpa_nl_ops[] = {
{
.cmd = VDPA_CMD_MGMTDEV_GET,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_mgmtdev_get_doit,
.dumpit = vdpa_nl_cmd_mgmtdev_get_dumpit,
},
{
.cmd = VDPA_CMD_DEV_NEW,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_dev_add_set_doit,
.flags = GENL_ADMIN_PERM,
},
{
.cmd = VDPA_CMD_DEV_DEL,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_dev_del_set_doit,
.flags = GENL_ADMIN_PERM,
},
{
.cmd = VDPA_CMD_DEV_GET,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_dev_get_doit,
.dumpit = vdpa_nl_cmd_dev_get_dumpit,
},
{
.cmd = VDPA_CMD_DEV_CONFIG_GET,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_dev_config_get_doit,
.dumpit = vdpa_nl_cmd_dev_config_get_dumpit,
},
{
.cmd = VDPA_CMD_DEV_VSTATS_GET,
- .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
.doit = vdpa_nl_cmd_dev_stats_get_doit,
.flags = GENL_ADMIN_PERM,
},
Patches currently in stable-queue which might be from dtatulea@xxxxxxxxxx are
queue-6.4/vdpa-add-queue-index-attr-to-vdpa_nl_policy-for-nlattr-length-check.patch
queue-6.4/vdpa-enable-strict-validation-for-netlinks-ops.patch
queue-6.4/vdpa-add-features-attr-to-vdpa_nl_policy-for-nlattr-length-check.patch
queue-6.4/vdpa-add-max-vqp-attr-to-vdpa_nl_policy-for-nlattr-length-check.patch
queue-6.4/virtio-vdpa-fix-cpumask-memory-leak-in-virtio_vdpa_f.patch
queue-6.4/vdpa-mlx5-fix-mr-initialized-semantics.patch
queue-6.4/vdpa-mlx5-delete-control-vq-iotlb-in-destroy_mr-only.patch
