24.11.7 patches review and test

Hi all,

Here is a list of patches targeted for stable release 24.11.7.

The planned date for the final release is 2026/08/10.

Please help with testing and validation of your use cases and report any issues/results with reply-all to this mail. For the final release the fixes and reported validations will be added to the release notes.

A release candidate tarball can be found at:

    https://dpdk.org/browse/dpdk-stable/tag/?id=v24.11.7-rc1

These patches are located at branch 24.11 of dpdk-stable repo:
https://dpdk.org/browse/dpdk-stable/

Thanks.

Luca Boccassi

---
Aarnav JP (7):
test/security: sync inline IPsec soft expiry check net/cnxk: fix underflow in LSO calculation common/cnxk: add cipher key length check in key set common/cnxk: fix static analysis issues common/cnxk: add auth key length check in inbound SA event/cnxk: fix static analysis issues crypto/cnxk: enforce DES/3DES cipher key length

Ajit Khaparde (4):
net/bnxt: modify check for short Tx BD net/bnxt: fix QP resource count in backing store config net/bnxt: fix Tx address for external mbuf net/bnxt: avoid null Rx queue dereference

Alexey Simakov (2):
net/enic: fix null dereference in flow mask check net/nfp: fix shifts in BAR size calculation

Alok Mishra (1):
common/cnxk: fix xstats names query

Anatoly Burakov (13):
net/ixgbe: fix shared PF pointer in representor net/ixgbe: fix non-shared data in IPsec session net/ixgbe: fix SCTP protocol-only flow parsing net/ixgbe: fix L4 protocol mask handling net/ixgbe: reset flow state on clear paths
ipc: fix log message in async request
ipc: use request ID instead of pointers
ipc: avoid deadlock in async alarm callback
ipc: fix memory leaks on async request partial failure
ipc: fix memory leak in async secondary path
ipc: trigger async callback without peers app/testpmd: mask VLAN TCI in flow rule app/testpmd: mask VLAN inner type in flow rule

Anurag Mandal (3):
net/iavf: fix misleading admin queue failure logging net/iavf: fix race condition on link status change net/iavf: fix duplicate VF reset during PF reset recovery

Borys Tsyrulnikov (1):
net/mlx5: fix double free in vectorized Rx recovery

Bruce Richardson (18):
test: fix failing tests on FreeBSD
cfgfile: prevent overflow on resize
cmdline: harden parser result buffer handling
cmdline: guard zero-size destination buffers eal/freebsd: fix memseg addresses in VA mode test/security: remove fast-free Tx flag test/security: fix MTU calculation underflow test/security: check for capabilities
net/intel: fix use of non-recommended string functions test/eal: remove PCI probing for recursive calls
examples: use strlcpy and strlcat
net/iavf: fix local memory leaks in TM hierarchy commit net/iavf: fix leak of queue to traffic class mapping data net/iavf: fix memory leak on error when adding flow parser net/ice: fix buffer leak in config of Tx queue TM node net/iavf: fix leak of flex metadata extraction field net/iavf: fix leak of IPsec crypto capabilities array
app: remove use of strncpy

Chenna Arnoori (2):
net/bnxt: fix Rx timestamping for non-PTP packets net/bnxt: avoid link flap when setting flow control

Chinh Cao (1):
net/i40e/base: fix integer overflow in NVM timing logic

Ciara Loftus (16):
net/i40e: fix simple Tx prepare rejecting tunnel type flags net/i40e: fix VLAN flow mask validation
net/iavf: fix disabling of promiscuous modes on close net/iavf: fix reset handling error log
net/ice: fix shaper profile reference count tracking net/ice: fix TM node ID validation against configured queues net/i40e: fix blocking link wait on device start net/iavf: wait for PF reset start before reinitializing net/iavf: fix event handler refcount leak on HW reset net/iavf: reject oversized frames in prep callback net/iavf: fix scalar Rx path zero-length segment net/ice: fix Rx packets statistics underflow net/ice: fix DCF Rx packets statistics underflow net/iavf: fix Rx packets statistics underflow net/i40e: activate alarm if interrupt delivery unavailable net/ice: fix adapter stopped on device start failure

Dakota Sicher (1):
net/bnxt: skip timed Tx pacing setup when unsupported

Damodharam Ammepalli (1):
net/bnxt: fix LRO capability reporting

Daniil Iskhakov (7):
net/i40e: validate DDP segment header before use net/ixgbe: fix queue received bytes CRC adjustment net/ixgbe: fix good octets CRC adjustment net/ixgbe: fix flow control frame byte adjustment net/ixgbe: fix MAC/VLAN item validation for ntuple
cryptodev: reset pointer after failure in callback init
cmdline: prevent out-of-bounds read

Daphne Priscilla (1):
crypto/cnxk: fix out-of-place AES-GCM

Dariusz Sosnowski (3):
net/mlx5: fix skipping PF representors net/mlx5: redirect LACP traffic for legacy E-Switch net/mlx5: use port index as representor index

David Marchand (8):
bus/fslmc: fix bus cleanup
pipeline: fix build with sanitizers or debug options
ci: update versions of actions in GHA bus/ifpga: remove unused AFU lookup helper vdpa/nfp: fix double PCI unmap on unplug bus/pci: fix mapping leak in bus cleanup bus/vmbus: fix interrupt leak in cleanup test/eal: remove PCI probing for vdev tests

Deepthi Kavalur (1):
net/i40e/base: fix loop counter width in DCB parsing

Denis Lyulin (1):
ethdev: fix pointer check in GENEVE and raw flow copy

Denis Sergeev (5):
net/nfp: fix null dereference in flower ctrl NFD3 Tx net/ark: fix null dereference on allocation failure net/ark: use standard IPv4 address parser
power: fix off-by-one in uncore env bounds check net/bnxt/tf_core: check pool use allocation

Dima Ruinskiy (2):
net/e1000/base: fix style
net/e1000/base: propagate PHY control register write error

Gagandeep Singh (3):
net/enetc: fix Tx BD structure
net/dpaa: fix interrupt unregister
net/dpaa: fix device remove

Gena Tertychnyi (1):
eal/windows: fix core count for more cores per NUMA

Hemant Agrawal (10):
bus/dpaa: fix FQ creation failure handling bus/dpaa: fix FQ query failure handling net/dpaa: fix CGR modification
bus/dpaa: fix FD leak for CCSR mmap net/dpaa: fix xstats name for Tx undersized counter net/dpaa: fix BMI xstats names
net/dpaa: remove duplicate packet types net/dpaa: fix BMI xstats by ID
net/dpaa: fix checksum offload with empty L3 length net/dpaa: fix mbuf leak in SG FD creation

Huisong Li (3):
power: remove duplicate uncore set frequency typedef
power: validate enabled lcores in PMD management API examples/l3fwd-power: fix latency query failure handling

James Raphael Tiovalen (2):
ethdev: fix out-of-bounds write in GENEVE option conversion
ethdev: fix out-of-bounds write in flex item conversion

Jasper Tran O'Leary (1):
net/gve: fix comma operator misuses

Joshua Washington (7):
net/gve: clear out shared memory region for statistics net/gve: delay adding mbuf head to software ring net/gve: copy data to QPL buffer when mbuf read does not net/gve: set mbuf to null in software ring after use net/gve: free context mbuf on later segment drop net/gve: increase range of DMA memzone IDs to 64 bits net/gve: restrict max ring size in GQ QPL to 2K

Kalesh AP (3):
net/bnxt: support PTP on Wh+ using HWRM interface net/bnxt: support Rx/Tx timestamp on Wh+ using HWRM net/bnxt: support PTP for Thor2

Kavya AV (1):
net/ice: use configured outer TPID for VLAN filter in DVM

Keegan Freyhof (3):
net/bnxt: fix NQ/CQ processing for interrupt handling net/bnxt: avoid queue use after free on close net/bnxt: clear stale Tx descriptor count

Kiran Vedere (1):
net/mlx5: fix uninitialized skip count

Linhu Li (1):
net/mlx5: fix flow counter race on query completion

Long Li (6):
net/mana: fix Rx mempool leak on port stop net/netvsc: retry VF hotplug until device disappears net/netvsc: retry on SIOCGIFHWADDR failure during VF hotplug net/netvsc: retry full probe when IB device not ready net/netvsc: retry when no matching MAC found
dev: report devargs truncation for multi-process hotplug

Lukasz Czapnik (1):
net/e1000/base: fix possible variable overflow

Marat Khalili (14):
bpf/validate: fix BPF_ADD of pointer to a scalar bpf/validate: fix BPF_LDX | EBPF_DW signed range bpf/validate: fix BPF_NEG of INT64_MIN and 0 bpf/validate: fix BPF_DIV and BPF_MOD signed part bpf/validate: fix BPF_MUL ranges minimum bpf/validate: fix BPF_MUL signed overflow UB bpf/validate: fix BPF_JGT/EBPF_JSGT no-jump max bpf/validate: fix BPF_JMP source range calculation bpf/validate: fix BPF_AND min calculations bpf/validate: fix BPF_LSH shift-out-of-bounds UB bpf/validate: fix BPF_OR min calculations bpf/validate: fix BPF_SUB signed max zero case bpf/validate: fix BPF_XOR signed min calculation bpf/validate: prevent overflow when building graph

Marcel Telka (1):
mem: update comment on virtual area reservation

Mattias Rönnblom (1):
test/dispatcher: preserve event opaque field

Maxime Leroy (6):
interrupts: propagate epoll error
fib6: fix tbl8 reservation drift in trie net/dpaa2: add L4 destination port to RSS hash key net/dpaa2: use L4 port extraction for SCTP RSS app/testpmd: include IP fields in UDP RSS option net/dpaa2: fix Rx queue count for primary process

Maxime Peim (1):
net/mlx5: prepend implicit items in sync flow creation

Md Shofiqul Islam (1):
dma/dpaa2: propagate removal error

Menachem Fogel (1):
net/e1000/base: fix NVM loop bounds and pointer access

Michael Pfeiffer (1):
net/mlx5: remove nonsensical flow action class ID checks

Mingjin Ye (1):
net/ixgbe: fix EEPROM read on copper media

Mohammad Shuab Siddique (2):
net/bnxt: fix RSS hash mode configuration for VF net/bnxt: fix PTP timestamp flags in scalar Rx

Mukul Katiyar (1):
net/ice: fix TM hierarchy deletion

Ouyang Hao (1):
net/af_xdp: fix resource leak in close

Pavan Nikhilesh (1):
dma/cnxk: fix crash on secondary process cleanup

Prashant Gupta (1):
net/dpaa: add null check in scheme delete

Radu Nicolau (2):
crypto/scheduler: fix session restore of pending enqueues crypto/virtio: remove explicit cookie allocation

Raghavendra Ningoji (1):
dmadev: clarify reported completion index

Rahul Bhansali (1):
common/cnxk: fix event type for soft expiry

Rakesh Kudurumalla (1):
examples/ipsec-secgw: drop packets in poll mode

Rupesh Chiluka (1):
app/dma-perf: fix hang with worker on main lcore

Sandeep Penigalapati (2):
net/i40e: fix flexible payload filter
net/ice: reject unsupported flow item range

Satha Rao (1):
common/cnxk: fix TM link config selection in debug dump

Sergei Iashin (3):
net/iavf: remove dead code in TM node parameter check net/octeontx: fix overflow in device name formatting net/octeontx/base: fix out-of-bounds DQ range lookup

Shaiq Wani (1):
net/ice: fix L2TPv2 outer MAC in training packet

Shani Peretz (1):
app/testpmd: fix flow job list double-free on reattach

Shijith Thotton (1):
dma/odm: fix zero-length DMA transfer

Shuzo Ichiyoshi (2):
net/e1000: fix igc RSS redirection table
net/e1000: fix igc Tx descriptor ring wrap

Sivaprasad Tummala (1):
examples: remove artificial Tx queue limit

Soumyadeep Hore (1):
net/iavf: remove PHC polling from Rx datapath

Srikanth Yalavarthi (3):
mldev: fix some typos in Doxygen
doc: fix some mldev model captions ml/cnxk: fix overwriting layer name during load

Stephen Hemminger (36):
net/axgbe: fix comma operator misuse
net/pcap: fix Windows build
net/pcap: advertise Tx multi segment
net/pcap: fix error accounting and backpressure on Tx net/pcap: reject non-Ethernet interfaces net/af_packet: fix indentation
app/testpmd: terminate process on second signal
eal: add helper to initialize process-shared mutex
ethdev: fix flow_ops_mutex for multi-process net/failsafe: fix hotplug mutex for multi-process net/atlantic: fix mbox mutex for multi-process net/axgbe: fix mutexes for multi-process net/bnxt: fix mutexes for multi-process net/hinic: fix mutexes for multi-process
bitops: fix build with GCC 17
ip_frag: fix unsafe tailq usage
ip_frag: randomize hash seed
mem: fix data race in Linux hugepage prefault
telemetry: fix thread-unsafe command parsing
ethdev: make telemetry parameter parsing thread-safe
dmadev: validate telemetry parameters
security: harden telemetry parameter parsing eventdev/eth_rx: fix thread-unsafe telemetry parsing eventdev/eth_rx: reject out-of-range telemetry ID eventdev/timer: reject out-of-range telemetry ID net/e1000: check flex filter mask range
tailq: fix name truncation
net/cnxk: fix telemetry SA info parameter parsing common/cnxk: fix thread-unsafe NIX telemetry parsing net/af_packet: fix parsing of numeric device args net/bonding: check mode before setting dedicated queues net/bonding: prevent crash on Rx/Tx from secondary process
ip_frag: include protocol in IPv4 reassembly key
ip_frag: drop IPv6 fragments with per-fragment headers
ip_frag: reject oversized reassembled datagrams
maintainers: fix app/test attributions

Thomas Monjalon (6):
examples/vm_power_manager: fix const discarding
devtools: fix regex matching literal plus in patches
spinlock: remove volatile qualifier
spinlock: fix API comments
net/mlx5: fix Rx split segment counter type
dts: fix topology capability comparison

Vanshika Shukla (2):
net/dpaa: fix port handle leak
dma/dpaa: fix out-of-bounds access in SG descriptor enqueue

Vincent Jardin (1):
doc: fix stale packet pacing in mlx5 guide

Vladimir Medvedkin (1):
fib6: fix error code propagation on next hop update

Wei Dai (1):
crypto/ipsec_mb: avoid clearing SNOW3G digest in-place

Xingui Yang (1):
net/hns3: fix L4 checksum for tunnel packets

Yunjian Wang (1):
net/mlx5: fix handling of FCQ allocation failure

Zaiyu Wang (9):
net/txgbe: remove duplicate xstats counters net/ngbe: remove duplicate xstats counters net/ngbe: add CDR config for YT PHY net/txgbe: fix traffic class priority configuration net/txgbe: enable Tx descriptor check per queue net/ngbe: support USO
net/txgbe: support USO
net/txgbe: fix link flow control config for Sapphire net/txgbe: fix mass of unknown interrupts

Zhiguang Jin (1):
ring: fix zero-copy burst API documentation

Zoe Cheimets (1):
net/bnxt: roll back Tx descriptors for invalid packets

[..]

[..]

Hello Maxime, Luca,

Commit 471350f6cd ("net/mlx5: prepend implicit items in sync flow creation") on 24.11 regresses eSwitch HWS when representor matching is disabled (repr_matching_en=0): traffic that should hit PF NIC Rx rules after FDB transfer is no longer received.

The backport dropped the priv->sh->config.repr_matching checks that previously gated implicit REPRESENTED_PORT / REG_C_0 prepending. That is correct on upstream main after repr_matching_en was removed (c41f621786), but on 24.11 the option still exists and, when off, TX representor tagging is not set up. Unconditionally prepending those matches then scopes NIC rules incorrectly.

Dariusz volunteered to send a fix.

We will send our full report soon.

Regards,
Ali

Hi all,

I sent the fix for the above to stable mailing list: https://inbox.dpdk.org/stable/[email protected]/

Best regards,
Dariusz Sosnowski

I think we should be ok for 23.11 as the commit that was being fixed was introduced in 24.07 so the backport is not relevant.

e909fd3a90 S F net/mlx5: prepend implicit items in sync flow creation (24.07)

and ok for 25.11 as c41f621786 is present.

$ git tag --contains c41f621786 | grep v25.11
v25.11

Hello,

We ran the following functional tests with Nvidia hardware on v24.11.7-rc1 (with 890094995dcaa0 ("net/mlx5: fix item prepending conditions") applied):
- Basic functionality:
  Send and receive multiple types of traffic.
- testpmd xstats counter test.
- testpmd timestamp test.
- Changing/checking link status through testpmd.
- rte_flow tests (https://doc.dpdk.org/guides/nics/mlx5.html#supported-hardware-offloads)
- RSS tests.
- VLAN filtering, stripping, and insertion tests.
- Checksum and TSO tests.
- ptype tests.
- link_status_interrupt example application tests.
- l3fwd-power example application tests.
- Multi-process example applications tests.
- Hardware LRO tests.
- Buffer Split tests.
- Tx scheduling tests.

Functional tests ran on:
- NIC: ConnectX-6 Dx / OS: Ubuntu 22.04 / Driver: MLNX_OFED_LINUX-24.10-5.1.6.1 / Firmware: 22.43.8016
- NIC: ConnectX-7 / OS: Ubuntu 22.04 / Driver: MLNX_OFED_LINUX-24.10-5.1.6.1 / Firmware: 28.43.8016
- DPU: BlueField-2 / DOCA SW version: 2.9.5 / Firmware: 24.43.8016

We don't see new issues blocking this release.

Thanks,
Ali

Update the test status for Intel part. dpdk24.11.7-rc1 all validation test done. found 1 new issue.

New issue:
Bug 1974 - [dpdk24.11.7-rc1] DPDK build failed with clang on Ubuntu26.04

* Build & CFLAG compile: cover the build test with latest GCC/Clang version on the following OS(all passed)
- Ubuntu26.04/Ubuntu25.10
- RHEL9.6/RHEL10
- Fedora43
- FreeBSD15
- SUSE16
- OpenAnolis8.10
- OpenEuler24.04-SP3
- AzureLinux3.0

* Function tests: All test done and passed
- i40E-(XXV710, X722) PF/VF: test scenarios including basic/RTE_FLOW/TSO/Jumboframe/checksum offload/mac_filter/VLAN/VXLAN/RSS, etc.
- IXGBE-(E610, 82599) PF/VF: test scenarios including basic/RTE_FLOW/TSO/Jumboframe/checksum offload/mac_filter/VLAN/VXLAN/RSS, etc.
- ICE-(E810, E2100) PF/VF: test scenarios including basic/Switch/Package Management/Flow Director/Advanced Tx/Advanced RSS/ACL/DCF/Flexible Descriptor, etc.
- IPsec: test scenarios including ipsec/ipsec-gw/ipsec library basic test - QAT&SW/FIB library, etc.
- Virtio: both function and performance test are covered. Such as PVP/Virtio_loopback/virtio-user loopback/virtio-net VM2VM perf testing/VMAWARE ESXI 8.0, etc.
- Cryptodev: test scenarios including Cryptodev API testing/CompressDev ISA-L/QAT/ZLIB PMD Testing/FIPS, etc.
- DLB: test scenarios including DLB2.0 and DLB2.5
- Other: test scenarios including AF_XDP, Power, CBDMA, DSA

* Performance test: All test done and passed
- Thoughput Performance
- Cryptodev Latency
- PF/VF NIC single core
- XXV710/E810 NIC Performance

Regards,
Xu, Hailin

This test hasn't changed and is the same in main as far as I can see. Are you sure this is a regression in 24.11.7 and not simply a new compiler issue that affects all branches?