d/numam-dpdk
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

igb/ixgbe: fix index overflow when resetting big queues

Browse Source 
Rings are resetted with a loop because memset cannot be used without
issuing a warning about volatile casting.
The index of the loop was a 16-bit variable which is sufficient for
ring entries number but not for the byte size of the whole ring.
The overflow happens when rings are configured for 4096 entries
(descriptor size is 16 bytes). The result is an endless loop.

It is fixed by indexing ring entries and resetting all bytes of the entry
with a simple assignment.
The descriptor initializer is zeroed thanks to its static declaration.

There already was a fix for ixgbe Tx only
(commit bcf457f8c0).
It is reverted to use the same fix everywhere (Rx/Tx for igb/ixgbe).

Signed-off-by: Thomas Monjalon <thomas.monjalon@6wind.com>
Acked-by: Ivan Boule <ivan.boule@6wind.com>
This commit is contained in:
Thomas Monjalon 2013-11-15 12:08:10 +01:00
parent 06bea48c36
commit e8ae856140
2 changed files with 16 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
lib/librte_pmd_e1000/igb_rxtx.c
View File

@ -1134,16 +1134,15 @@ igb_reset_tx_queue_stat(struct igb_tx_queue *txq)
static void
igb_reset_tx_queue(struct igb_tx_queue *txq, struct rte_eth_dev *dev)
{
static const union e1000_adv_tx_desc zeroed_desc;
struct igb_tx_entry *txe = txq->sw_ring;
uint32_t size;
uint16_t i, prev;
struct e1000_hw *hw;
hw = E1000_DEV_PRIVATE_TO_HW(dev->data->dev_private);
size = sizeof(union e1000_adv_tx_desc) * txq->nb_tx_desc;
/* Zero out HW ring memory */
for (i = 0; i < size; i++) {
((volatile char *)txq->tx_ring)[i] = 0;
for (i = 0; i < txq->nb_tx_desc; i++) {
txq->tx_ring[i] = zeroed_desc;
}
/* Initialize ring entries */
@ -1295,13 +1294,12 @@ eth_igb_rx_queue_release(void *rxq)
static void
igb_reset_rx_queue(struct igb_rx_queue *rxq)
{
unsigned size;
static const union e1000_adv_rx_desc zeroed_desc;
unsigned i;
/* Zero out HW ring memory */
size = sizeof(union e1000_adv_rx_desc) * rxq->nb_rx_desc;
for (i = 0; i < size; i++) {
((volatile char *)rxq->rx_ring)[i] = 0;
for (i = 0; i < rxq->nb_rx_desc; i++) {
rxq->rx_ring[i] = zeroed_desc;
}
rxq->rx_tail = 0;

19
lib/librte_pmd_ixgbe/ixgbe_rxtx.c
View File

@ -1797,13 +1797,13 @@ ixgbe_dev_tx_queue_release(void *txq)
static void
ixgbe_reset_tx_queue(struct igb_tx_queue *txq)
{
static const union ixgbe_adv_tx_desc zeroed_desc;
struct igb_tx_entry *txe = txq->sw_ring;
uint16_t prev;
uint32_t i;
uint16_t prev, i;
/* Zero out HW ring memory */
for (i = 0; i < sizeof(union ixgbe_adv_tx_desc) * txq->nb_tx_desc; i++) {
((volatile char *)txq->tx_ring)[i] = 0;
for (i = 0; i < txq->nb_tx_desc; i++) {
txq->tx_ring[i] = zeroed_desc;
}
/* Initialize SW ring entries */
@ -1812,9 +1812,9 @@ ixgbe_reset_tx_queue(struct igb_tx_queue *txq)
volatile union ixgbe_adv_tx_desc *txd = &txq->tx_ring[i];
txd->wb.status = IXGBE_TXD_STAT_DD;
txe[i].mbuf = NULL;
txe[i].last_id = (uint16_t)i;
txe[prev].next_id = (uint16_t)i;
prev = (uint16_t)i;
txe[i].last_id = i;
txe[prev].next_id = i;
prev = i;
}
txq->tx_next_dd = (uint16_t)(txq->tx_rs_thresh - 1);
@ -2092,6 +2092,7 @@ check_rx_burst_bulk_alloc_preconditions(__rte_unused struct igb_rx_queue *rxq)
static void
ixgbe_reset_rx_queue(struct igb_rx_queue *rxq)
{
static const union ixgbe_adv_rx_desc zeroed_desc;
unsigned i;
uint16_t len;
@ -2119,8 +2120,8 @@ ixgbe_reset_rx_queue(struct igb_rx_queue *rxq)
* the H/W ring so look-ahead logic in Rx Burst bulk alloc function
* reads extra memory as zeros.
*/
for (i = 0; i < len * sizeof(union ixgbe_adv_rx_desc); i++) {
((volatile char *)rxq->rx_ring)[i] = 0;
for (i = 0; i < len; i++) {
rxq->rx_ring[i] = zeroed_desc;
}
#ifdef RTE_LIBRTE_IXGBE_RX_ALLOW_BULK_ALLOC