Skip to contentSkip to conversation

net/sched: cls_flower: Set the filter Hardware device for all use-cases

bug report Dan Carpenter 2 participants 4 messages Jan 17, 2017 – Jan 18, 2017 Kernel janitors

lore
Share & tools
lore
#0 lore raw

Hello Hadar Hen Zion,

The patch a6e169312971: "net/sched: cls_flower: Set the filter Hardware device for all use-cases" from Dec 4, 2016, leads to the following static checker warning:

	net/sched/cls_flower.c:272 fl_hw_replace_filter()
	error: we previously assumed 'dev' could be null (see line 256)

net/sched/cls_flower.c
240 static int fl_hw_replace_filter(struct tcf_proto *tp,

   241                                  struct flow_dissector *dissector,
   242                                  struct fl_flow_key *mask,
   243                                  struct cls_fl_filter *f)
   244  {
   245          struct net_device *dev = tp->q->dev_queue->dev;
   246          struct tc_cls_flower_offload offload = {0};
   247          struct tc_to_netdev *tc = &f->tc;
   248          int err;
   249  
   250          if (!tc_can_offload(dev, tp)) {
   251                  if (tcf_exts_get_dev(dev, &f->exts, &f->hw_dev) ||
   252                      (f->hw_dev && !tc_can_offload(f->hw_dev, tp))) {
                             ^^^^^^^^^

Let's say this is NULL.

   253                          f->hw_dev = dev;
   254                          return tc_skip_sw(f->flags) ? -EINVAL : 0;
   255                  }
   256                  dev = f->hw_dev;

That means "dev" is NULL.

   257                  tc->egress_dev = true;
   258          } else {
   259                  f->hw_dev = dev;
   260          }
   261  
   262          offload.command = TC_CLSFLOWER_REPLACE;
   263          offload.cookie = (unsigned long)f;
   264          offload.dissector = dissector;
   265          offload.mask = mask;
   266          offload.key = &f->mkey;
   267          offload.exts = &f->exts;
   268  
   269          tc->type = TC_SETUP_CLSFLOWER;
   270          tc->cls_flower = &offload;
   271  
   272          err = dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol,

So we oops here.

273 tc);
274
275 if (tc_skip_sw(f->flags))
276 return err;
277 return 0;
278 }

regards,
dan carpenter

#1 lore raw
Quoted 50 lines · Dan Carpenter

Hello Hadar Hen Zion,

The patch a6e169312971: "net/sched: cls_flower: Set the filter Hardware device for all use-cases" from Dec 4, 2016, leads to the following static checker warning:

	net/sched/cls_flower.c:272 fl_hw_replace_filter()
	error: we previously assumed 'dev' could be null (see line 256)

net/sched/cls_flower.c

    240  static int fl_hw_replace_filter(struct tcf_proto *tp,
    241                                  struct flow_dissector *dissector,
    242                                  struct fl_flow_key *mask,
    243                                  struct cls_fl_filter *f)
    244  {
    245          struct net_device *dev = tp->q->dev_queue->dev;
    246          struct tc_cls_flower_offload offload = {0};
    247          struct tc_to_netdev *tc = &f->tc;
    248          int err;
    249
    250          if (!tc_can_offload(dev, tp)) {
    251                  if (tcf_exts_get_dev(dev, &f->exts, &f->hw_dev) ||
    252                      (f->hw_dev && !tc_can_offload(f->hw_dev, tp))) {
                              ^^^^^^^^^

Let's say this is NULL.

    253                          f->hw_dev = dev;
    254                          return tc_skip_sw(f->flags) ? -EINVAL : 0;
    255                  }
    256                  dev = f->hw_dev;

That means "dev" is NULL.

    257                  tc->egress_dev = true;
    258          } else {
    259                  f->hw_dev = dev;
    260          }
    261
    262          offload.command = TC_CLSFLOWER_REPLACE;
    263          offload.cookie = (unsigned long)f;
    264          offload.dissector = dissector;
    265          offload.mask = mask;
    266          offload.key = &f->mkey;
    267          offload.exts = &f->exts;
    268
    269          tc->type = TC_SETUP_CLSFLOWER;
    270          tc->cls_flower = &offload;
    271
    272          err = dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol,
Quoted 1 line

So we oops here.

I'll send a fix ASAP.

Thanks,
Hadar

Quoted 9 lines
    273                                              tc);
    274
    275          if (tc_skip_sw(f->flags))
    276                  return err;
    277          return 0;
    278  }

regards,
dan carpenter

#2 lore raw
In reply to Dan Carpenter
Quoted 24 lines · Dan Carpenter

Hello Hadar Hen Zion,

The patch a6e169312971: "net/sched: cls_flower: Set the filter Hardware device for all use-cases" from Dec 4, 2016, leads to the following static checker warning:

	net/sched/cls_flower.c:272 fl_hw_replace_filter()
	error: we previously assumed 'dev' could be null (see line 256)

net/sched/cls_flower.c

    240  static int fl_hw_replace_filter(struct tcf_proto *tp,
    241                                  struct flow_dissector *dissector,
    242                                  struct fl_flow_key *mask,
    243                                  struct cls_fl_filter *f)
    244  {
    245          struct net_device *dev = tp->q->dev_queue->dev;
    246          struct tc_cls_flower_offload offload = {0};
    247          struct tc_to_netdev *tc = &f->tc;
    248          int err;
    249
    250          if (!tc_can_offload(dev, tp)) {
    251                  if (tcf_exts_get_dev(dev, &f->exts, &f->hw_dev) ||
    252                      (f->hw_dev && !tc_can_offload(f->hw_dev, tp))) {
                              ^^^^^^^^^
Quoted 8 lines

Let's say this is NULL.

    253                          f->hw_dev = dev;
    254                          return tc_skip_sw(f->flags) ? -EINVAL : 0;
    255                  }
    256                  dev = f->hw_dev;

That means "dev" is NULL.

After re-checking the code, it's a not a real bug.
If 'f->hw_dev' is NULL we would never get here. tcf_exts_get_dev() function above returns an error in case 'f->hw_dev' is NULL, so we'll go into the 'if' and return from the function.

The above 'f->hw_dev' check you marked above is redundant, that's why we got the static checker warning.
I'll send a patch that remove it.

Thanks,
Hadar

Quoted 29 lines
    257                  tc->egress_dev = true;
    258          } else {
    259                  f->hw_dev = dev;
    260          }
    261
    262          offload.command = TC_CLSFLOWER_REPLACE;
    263          offload.cookie = (unsigned long)f;
    264          offload.dissector = dissector;
    265          offload.mask = mask;
    266          offload.key = &f->mkey;
    267          offload.exts = &f->exts;
    268
    269          tc->type = TC_SETUP_CLSFLOWER;
    270          tc->cls_flower = &offload;
    271
    272          err = dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol,

So we oops here.

    273                                              tc);
    274
    275          if (tc_skip_sw(f->flags))
    276                  return err;
    277          return 0;
    278  }

regards,
dan carpenter

#3 lore raw
In reply to Dan Carpenter
Quoted 42 lines · Hadar Hen Zion
Quoted 24 lines · Dan Carpenter

Hello Hadar Hen Zion,

The patch a6e169312971: "net/sched: cls_flower: Set the filter Hardware device for all use-cases" from Dec 4, 2016, leads to the following static checker warning:

	net/sched/cls_flower.c:272 fl_hw_replace_filter()
	error: we previously assumed 'dev' could be null (see line 256)

net/sched/cls_flower.c
240 static int fl_hw_replace_filter(struct tcf_proto *tp,

   241                                  struct flow_dissector *dissector,
   242                                  struct fl_flow_key *mask,
   243                                  struct cls_fl_filter *f)
   244  {
   245          struct net_device *dev = tp->q->dev_queue->dev;
   246          struct tc_cls_flower_offload offload = {0};
   247          struct tc_to_netdev *tc = &f->tc;
   248          int err;
   249
   250          if (!tc_can_offload(dev, tp)) {
   251                  if (tcf_exts_get_dev(dev, &f->exts, &f->hw_dev) ||
   252                      (f->hw_dev && !tc_can_offload(f->hw_dev, tp))) {
                             ^^^^^^^^^
Quoted 8 lines

Let's say this is NULL.

   253                          f->hw_dev = dev;
   254                          return tc_skip_sw(f->flags) ? -EINVAL : 0;
   255                  }
   256                  dev = f->hw_dev;

That means "dev" is NULL.

After re-checking the code, it's a not a real bug.
If 'f->hw_dev' is NULL we would never get here. tcf_exts_get_dev() function above returns an error in case 'f->hw_dev' is NULL, so we'll go into the 'if' and return from the function.

Quoted 3 lines

The above 'f->hw_dev' check you marked above is redundant, that's why we got the static checker warning.
I'll send a patch that remove it.

Yeah. Removing the check is the right thing.

Oddly enough, this Smatch test is supposed to ignore NULL checks when we can tell that they non-NULL. The only reason this warning was printed was because I had a bug where it said that f->exts.nr_actions was always zero here. That's fixed today apparently so it no longer generates the warning.

Two steps forward, one step back.

regards,
dan carpenter