ice: Add a per-VF limit on number of FDIR filters

Browse source

While the iavf driver adds a s/w limit (128) on the number of FDIR
filters that the VF can request, a malicious VF driver can request more
than that and exhaust the resources for other VFs.

Add a similar limit in ice.

CC: stable@vger.kernel.org
Fixes: 1f7ea1cd6a ("ice: Enable FDIR Configure for AVF")
Reviewed-by: Przemek Kitszel <przemyslaw.kitszel@intel.com>
Suggested-by: Sridhar Samudrala <sridhar.samudrala@intel.com>
Signed-off-by: Ahmed Zaki <ahmed.zaki@intel.com>
Reviewed-by: Wojciech Drewek <wojciech.drewek@intel.com>
Tested-by: Rafal Romanowski <rafal.romanowski@intel.com>
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>

...

This commit is contained in:

Ahmed Zaki 2024-06-14 07:18:42 -06:00 • committed by Tony Nguyen

parent 3ba359c0cd

commit 6ebbe97a48

4 changed files with 21 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/net/ethernet/intel/ice/ice_ethtool_fdir.c

View file

3

drivers/net/ethernet/intel/ice/ice_fdir.h

View file

16

drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c

View file

1

drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.h

View file