LVS
lvs-devel
Google
 
Web LinuxVirtualServer.org

Re: [PATCH net v3] ipvs: Improve robustness to the ipvs sysctl

To: hujunwei <hujunwei4@xxxxxxxxxx>
Subject: Re: [PATCH net v3] ipvs: Improve robustness to the ipvs sysctl
Cc: wensong@xxxxxxxxxxxx, horms@xxxxxxxxxxxx, pablo@xxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxxxx, Florian Westphal <fw@xxxxxxxxx>, davem@xxxxxxxxxxxxx, Florian Westphal <fw@xxxxxxxxx>, "netdev@xxxxxxxxxxxxxxx" <netdev@xxxxxxxxxxxxxxx>, lvs-devel@xxxxxxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxx, coreteam@xxxxxxxxxxxxx, Mingfangsen <mingfangsen@xxxxxxxxxx>, wangxiaogang3@xxxxxxxxxx, xuhanbing@xxxxxxxxxx
From: Julian Anastasov <ja@xxxxxx>
Date: Wed, 31 Jul 2019 20:53:47 +0300 (EEST)
        Hello,

On Thu, 1 Aug 2019, hujunwei wrote:

> From: Junwei Hu <hujunwei4@xxxxxxxxxx>
> 
> The ipvs module parse the user buffer and save it to sysctl,
> then check if the value is valid. invalid value occurs
> over a period of time.
> Here, I add a variable, struct ctl_table tmp, used to read
> the value from the user buffer, and save only when it is valid.
> I delete proc_do_sync_mode and use extra1/2 in table for the
> proc_dointvec_minmax call.
> 
> Fixes: f73181c8288f ("ipvs: add support for sync threads")
> Signed-off-by: Junwei Hu <hujunwei4@xxxxxxxxxx>
> Acked-by: Julian Anastasov <ja@xxxxxx>

        Yep, Acked-by: Julian Anastasov <ja@xxxxxx>

> ---
> V1->V2:
> - delete proc_do_sync_mode and use proc_dointvec_minmax call.
> V2->V3:
> - update git version
> ---
>  net/netfilter/ipvs/ip_vs_ctl.c | 69 +++++++++++++++++-----------------
>  1 file changed, 35 insertions(+), 34 deletions(-)
> 
> diff --git a/net/netfilter/ipvs/ip_vs_ctl.c b/net/netfilter/ipvs/ip_vs_ctl.c
> index 060565e7d227..72189559a1cd 100644
> --- a/net/netfilter/ipvs/ip_vs_ctl.c
> +++ b/net/netfilter/ipvs/ip_vs_ctl.c
> @@ -1737,12 +1737,18 @@ proc_do_defense_mode(struct ctl_table *table, int 
> write,
>       int val = *valp;
>       int rc;
> 
> -     rc = proc_dointvec(table, write, buffer, lenp, ppos);
> +     struct ctl_table tmp = {
> +             .data = &val,
> +             .maxlen = sizeof(int),
> +             .mode = table->mode,
> +     };
> +
> +     rc = proc_dointvec(&tmp, write, buffer, lenp, ppos);
>       if (write && (*valp != val)) {
> -             if ((*valp < 0) || (*valp > 3)) {
> -                     /* Restore the correct value */
> -                     *valp = val;
> +             if (val < 0 || val > 3) {
> +                     rc = -EINVAL;
>               } else {
> +                     *valp = val;
>                       update_defense_level(ipvs);
>               }
>       }
> @@ -1756,33 +1762,20 @@ proc_do_sync_threshold(struct ctl_table *table, int 
> write,
>       int *valp = table->data;
>       int val[2];
>       int rc;
> +     struct ctl_table tmp = {
> +             .data = &val,
> +             .maxlen = table->maxlen,
> +             .mode = table->mode,
> +     };
> 
> -     /* backup the value first */
>       memcpy(val, valp, sizeof(val));
> -
> -     rc = proc_dointvec(table, write, buffer, lenp, ppos);
> -     if (write && (valp[0] < 0 || valp[1] < 0 ||
> -         (valp[0] >= valp[1] && valp[1]))) {
> -             /* Restore the correct value */
> -             memcpy(valp, val, sizeof(val));
> -     }
> -     return rc;
> -}
> -
> -static int
> -proc_do_sync_mode(struct ctl_table *table, int write,
> -                  void __user *buffer, size_t *lenp, loff_t *ppos)
> -{
> -     int *valp = table->data;
> -     int val = *valp;
> -     int rc;
> -
> -     rc = proc_dointvec(table, write, buffer, lenp, ppos);
> -     if (write && (*valp != val)) {
> -             if ((*valp < 0) || (*valp > 1)) {
> -                     /* Restore the correct value */
> -                     *valp = val;
> -             }
> +     rc = proc_dointvec(&tmp, write, buffer, lenp, ppos);
> +     if (write) {
> +             if (val[0] < 0 || val[1] < 0 ||
> +                 (val[0] >= val[1] && val[1]))
> +                     rc = -EINVAL;
> +             else
> +                     memcpy(valp, val, sizeof(val));
>       }
>       return rc;
>  }
> @@ -1795,12 +1788,18 @@ proc_do_sync_ports(struct ctl_table *table, int write,
>       int val = *valp;
>       int rc;
> 
> -     rc = proc_dointvec(table, write, buffer, lenp, ppos);
> +     struct ctl_table tmp = {
> +             .data = &val,
> +             .maxlen = sizeof(int),
> +             .mode = table->mode,
> +     };
> +
> +     rc = proc_dointvec(&tmp, write, buffer, lenp, ppos);
>       if (write && (*valp != val)) {
> -             if (*valp < 1 || !is_power_of_2(*valp)) {
> -                     /* Restore the correct value */
> +             if (val < 1 || !is_power_of_2(val))
> +                     rc = -EINVAL;
> +             else
>                       *valp = val;
> -             }
>       }
>       return rc;
>  }
> @@ -1860,7 +1859,9 @@ static struct ctl_table vs_vars[] = {
>               .procname       = "sync_version",
>               .maxlen         = sizeof(int),
>               .mode           = 0644,
> -             .proc_handler   = proc_do_sync_mode,
> +             .proc_handler   = proc_dointvec_minmax,
> +             .extra1         = SYSCTL_ZERO,
> +             .extra2         = SYSCTL_ONE,
>       },
>       {
>               .procname       = "sync_ports",
> -- 
> 2.21.GIT

Regards

--
Julian Anastasov <ja@xxxxxx>

<Prev in Thread] Current Thread [Next in Thread>