1fe00fd358
In function power_guest_channel_read_msg, 'lcore_id' is used before
validity check, which may cause buffer 'global_fds' accessed by index
'lcore_id' overflow.
This patch moves the validity check of 'lcore_id' before the 'lcore_id'
being used for the first time.
Fixes: 9dc843eb27
("power: extend guest channel API for reading")
Cc: stable@dpdk.org
Signed-off-by: Hongbo Zheng <zhenghongbo3@huawei.com>
Signed-off-by: Min Hu (Connor) <humin29@huawei.com>
Reviewed-by: Reshma Pattan <reshma.pattan@intel.com>
Acked-by: David Hunt <david.hunt@intel.com>
234 lines
5.1 KiB
C
234 lines
5.1 KiB
C
/* SPDX-License-Identifier: BSD-3-Clause
|
|
* Copyright(c) 2010-2014 Intel Corporation
|
|
*/
|
|
|
|
#include <glob.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <unistd.h>
|
|
#include <signal.h>
|
|
#include <limits.h>
|
|
#include <fcntl.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
#include <poll.h>
|
|
|
|
|
|
#include <rte_log.h>
|
|
#include <rte_power.h>
|
|
|
|
#include "guest_channel.h"
|
|
|
|
#define RTE_LOGTYPE_GUEST_CHANNEL RTE_LOGTYPE_USER1
|
|
|
|
/* Timeout for incoming message in milliseconds. */
|
|
#define TIMEOUT 10
|
|
|
|
static int global_fds[RTE_MAX_LCORE] = { [0 ... RTE_MAX_LCORE-1] = -1 };
|
|
|
|
int
|
|
guest_channel_host_check_exists(const char *path)
|
|
{
|
|
char glob_path[PATH_MAX];
|
|
glob_t g;
|
|
int ret;
|
|
|
|
/* we cannot know in advance which cores have VM channels, so glob */
|
|
snprintf(glob_path, PATH_MAX, "%s.*", path);
|
|
|
|
ret = glob(glob_path, GLOB_NOSORT, NULL, &g);
|
|
if (ret != 0) {
|
|
/* couldn't read anything */
|
|
ret = 0;
|
|
goto out;
|
|
}
|
|
|
|
/* do we have at least one match? */
|
|
ret = g.gl_pathc > 0;
|
|
|
|
out:
|
|
globfree(&g);
|
|
return ret;
|
|
}
|
|
|
|
int
|
|
guest_channel_host_connect(const char *path, unsigned int lcore_id)
|
|
{
|
|
int flags, ret;
|
|
struct rte_power_channel_packet pkt;
|
|
char fd_path[PATH_MAX];
|
|
int fd = -1;
|
|
|
|
if (lcore_id >= RTE_MAX_LCORE) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel(%u) is out of range 0...%d\n",
|
|
lcore_id, RTE_MAX_LCORE-1);
|
|
return -1;
|
|
}
|
|
/* check if path is already open */
|
|
if (global_fds[lcore_id] != -1) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel(%u) is already open with fd %d\n",
|
|
lcore_id, global_fds[lcore_id]);
|
|
return -1;
|
|
}
|
|
|
|
snprintf(fd_path, PATH_MAX, "%s.%u", path, lcore_id);
|
|
RTE_LOG(INFO, GUEST_CHANNEL, "Opening channel '%s' for lcore %u\n",
|
|
fd_path, lcore_id);
|
|
fd = open(fd_path, O_RDWR);
|
|
if (fd < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Unable to to connect to '%s' with error "
|
|
"%s\n", fd_path, strerror(errno));
|
|
return -1;
|
|
}
|
|
|
|
flags = fcntl(fd, F_GETFL, 0);
|
|
if (flags < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Failed on fcntl get flags for file %s\n",
|
|
fd_path);
|
|
goto error;
|
|
}
|
|
|
|
flags |= O_NONBLOCK;
|
|
if (fcntl(fd, F_SETFL, flags) < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Failed on setting non-blocking mode for "
|
|
"file %s", fd_path);
|
|
goto error;
|
|
}
|
|
/* QEMU needs a delay after connection */
|
|
sleep(1);
|
|
|
|
/* Send a test packet, this command is ignored by the host, but a successful
|
|
* send indicates that the host endpoint is monitoring.
|
|
*/
|
|
pkt.command = RTE_POWER_CPU_POWER_CONNECT;
|
|
global_fds[lcore_id] = fd;
|
|
ret = guest_channel_send_msg(&pkt, lcore_id);
|
|
if (ret != 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL,
|
|
"Error on channel '%s' communications test: %s\n",
|
|
fd_path, ret > 0 ? strerror(ret) :
|
|
"channel not connected");
|
|
goto error;
|
|
}
|
|
RTE_LOG(INFO, GUEST_CHANNEL, "Channel '%s' is now connected\n", fd_path);
|
|
return 0;
|
|
error:
|
|
close(fd);
|
|
global_fds[lcore_id] = -1;
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
guest_channel_send_msg(struct rte_power_channel_packet *pkt,
|
|
unsigned int lcore_id)
|
|
{
|
|
int ret, buffer_len = sizeof(*pkt);
|
|
void *buffer = pkt;
|
|
|
|
if (lcore_id >= RTE_MAX_LCORE) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel(%u) is out of range 0...%d\n",
|
|
lcore_id, RTE_MAX_LCORE-1);
|
|
return -1;
|
|
}
|
|
|
|
if (global_fds[lcore_id] < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel is not connected\n");
|
|
return -1;
|
|
}
|
|
while (buffer_len > 0) {
|
|
ret = write(global_fds[lcore_id], buffer, buffer_len);
|
|
if (ret == buffer_len)
|
|
return 0;
|
|
if (ret == -1) {
|
|
if (errno == EINTR)
|
|
continue;
|
|
return errno;
|
|
}
|
|
buffer = (char *)buffer + ret;
|
|
buffer_len -= ret;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int rte_power_guest_channel_send_msg(struct rte_power_channel_packet *pkt,
|
|
unsigned int lcore_id)
|
|
{
|
|
return guest_channel_send_msg(pkt, lcore_id);
|
|
}
|
|
|
|
int power_guest_channel_read_msg(void *pkt,
|
|
size_t pkt_len,
|
|
unsigned int lcore_id)
|
|
{
|
|
int ret;
|
|
struct pollfd fds;
|
|
|
|
if (pkt_len == 0 || pkt == NULL)
|
|
return -1;
|
|
|
|
if (lcore_id >= RTE_MAX_LCORE) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel(%u) is out of range 0...%d\n",
|
|
lcore_id, RTE_MAX_LCORE-1);
|
|
return -1;
|
|
}
|
|
|
|
if (global_fds[lcore_id] < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel is not connected\n");
|
|
return -1;
|
|
}
|
|
|
|
fds.fd = global_fds[lcore_id];
|
|
fds.events = POLLIN;
|
|
|
|
ret = poll(&fds, 1, TIMEOUT);
|
|
if (ret == 0) {
|
|
RTE_LOG(DEBUG, GUEST_CHANNEL, "Timeout occurred during poll function.\n");
|
|
return -1;
|
|
} else if (ret < 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Error occurred during poll function: %s\n",
|
|
strerror(errno));
|
|
return -1;
|
|
}
|
|
|
|
while (pkt_len > 0) {
|
|
ret = read(global_fds[lcore_id],
|
|
pkt, pkt_len);
|
|
|
|
if (ret < 0) {
|
|
if (errno == EINTR)
|
|
continue;
|
|
return -1;
|
|
}
|
|
|
|
if (ret == 0) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Expected more data, but connection has been closed.\n");
|
|
return -1;
|
|
}
|
|
pkt = (char *)pkt + ret;
|
|
pkt_len -= ret;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int rte_power_guest_channel_receive_msg(void *pkt,
|
|
size_t pkt_len,
|
|
unsigned int lcore_id)
|
|
{
|
|
return power_guest_channel_read_msg(pkt, pkt_len, lcore_id);
|
|
}
|
|
|
|
void
|
|
guest_channel_host_disconnect(unsigned int lcore_id)
|
|
{
|
|
if (lcore_id >= RTE_MAX_LCORE) {
|
|
RTE_LOG(ERR, GUEST_CHANNEL, "Channel(%u) is out of range 0...%d\n",
|
|
lcore_id, RTE_MAX_LCORE-1);
|
|
return;
|
|
}
|
|
if (global_fds[lcore_id] < 0)
|
|
return;
|
|
close(global_fds[lcore_id]);
|
|
global_fds[lcore_id] = -1;
|
|
}
|