net/mlx5e: MACsec, fix RX data path 16 RX security channel limit

Browse source

Currently the data path metadata flow id mask wrongly limits the
number of different RX security channels (SC) to 16, whereas in
adding RX SC the limit is "2^16 - 1" this cause an overlap in
metadata flow id once more than 16 RX SCs is added, this corrupts
MACsec RX offloaded flow handling.

Fix by using the correct mask, while at it improve code to use this
mask when adding the Rx rule and improve visibility of such errors
by adding debug massage.

Fixes: b7c9400cbc ("net/mlx5e: Implement MACsec Rx data path using MACsec skb_metadata_dst")
Signed-off-by: Raed Salem <raeds@nvidia.com>
Reviewed-by: Emeel Hakim <ehakim@nvidia.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>

...

This commit is contained in:

Raed Salem 2022-10-27 15:47:17 +03:00 • committed by Saeed Mahameed

parent 406e6db7fc

commit 813115c466

3 changed files with 14 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

11

drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c

View file

6

drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.h

View file

4

drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec_fs.c

View file