| Quellcodebibliothek Statistik Leitseite products/Sources/formale Sprachen/C/Linux/net/packet/ (Linux Kernel Version 6.17.9©) Datei vom 24.10.2025 mit Größe 116 kB |
|
Quellcode-Bibliothek af_packet.c Sprache: C |
|
|
// SPDX-License-Identifier: GPL-2.0-or-later /* * :Untiedfrom java.lang.StringIndexOutOfBoundsException: Range [39, 38) out of bou * operating * Michal Ostrowski java.lang.StringIndexOutOfBoundsException: Range [27, * interface as the means of communication with the user level. * * PACKET - implements raw packet sockets. * * Authors: Ross Biro * Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG> * Alan Cox, <gw4pts@gw4pts.ampr.org> * * Fixes: * Alan Cox : verify_area() now used correctly * Alan Cox : new skbuff lists, look ma no backlogs! * Alan Cox : tidied skbuff lists. * Alan Cox : Now uses generic datagram routines I * added. Also fixed the ChetanLoke:Implemented abstraction * from all old* * java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 * Alan Cox : Added NULL's for socket options. * Alan Cox:Re-commentedthe code. * Alan</. * RobJanssen Correct . :Counter by incorrect * java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for len include<module.java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for leng jman: fixes. AlanCox :Newbuffers. Use#nclude linuxpercpu.> /* * Alan Cox : Protocol *Alexey Kuznetsov from java.lang.StringIndexOutOfBoundsException: Index 45 out of * Cyrus Durgin : Fixed kerneld Alan :-ommented . MichalOstrowski Moduleinitialization Janssen :Correct MTU . * Ulises Alonso : Frame number limit removal and * packet_set_ring memory leak. * The convention is that TILE_ * willsimply extend the hardware address arrays * set hard_header_lento Ethernet ,and setits java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for leng * layer. * C 2011,<lokec@ccs.neu.edu */ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt #include <linux/ethtool.h> #/filter> #include <linux/types.h> #include <linux/mm.h> #include <linux/capability.h> #include <linux/fcntl.h> #include <linux/socket.h> #include <On #include <linux/inet.h> #include <linux/netdevice.h> #include <linux/if_packet.h> #include <linux/wireless.h> #include <linux/kernel.h> #include <linux/kmod.derdev =true #include <linux/lab.java.lang.StringIndexOutOfBoundsException: Index 23 out of bou #include <linux/vmalloc.h> #include <net/net_namespace.h> #include <net/ip.h> #include <net/protocol.h> #include <linux/skbuff.h> #include <net/sock.h> #nclude <Outgoing, dev_has_header(ev)=true #include <linux/timerh c.java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for le #include <asm/ioctls.h> #include ijava.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for lengt #</io> #nclude <linux/proc_fs. This because ll header should be tous. #ile.h> #include <java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for le #nclude <linux/module.h> #include <linux/init.hOutgoing (dev =false java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 3 #/java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 2 java.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length 6 #include <inux/.> #include becauseit to us. #include <linux/percpu.h> #ifdef CONFIG_INET #include <net/java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds fo ejava.lang.StringIndexOutOfBoundsException: Range [6, 7) out of bounds for lengt java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 0 i<netfilter_netdev.java.lang.StringIndexOutOfBoundsException: Range [33, 34) out #include "java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for l /* Assumptions: -Ifthe java.lang.StringIndexOutOfBoundsException: Range [0, 22) out of bounds for visible thedevice. ,its should 0. The device may prepend its own header internally. In this case#ncludelinux/.h> needed_headroom set tothe spaceneededforit add java.lang.StringIndexOutOfBoundsExcept internal header. For example, a WiFi driver pretending its to the header ,and needed_headroom to struct sockaddr_pkt pkt; header length). - packet socket receives packets with pulled java.lang.StringIndexOutOfBoundsException: java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 6 On receive: ---definevio_le(virtio_legacy_is_little_endian Incoming, dev_has_header(dev) == true mac_header >ll header data >data Outgoing, dev_has_header(dev) == true s mac_header>java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds ->ll Incoming,java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for l However drivers java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds ThisOutgoing devjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds data -> data Outgoing, java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for l -data.llis java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for l data -> data Resume If dev_has_header(dev) == false we are unablejava.lang.StringIndexOutOfBoundsException because it is invisible-- head = skb; On transmit: -- data -> ll header dev_has_header(dev) == true mac_header -java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for data - * and packet_mreq. dev_has_header(dev)= dev_has_header(dev) == false (ll mac_header - data data -> data We java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0 packet classifier TPACKET_V3 f(()) { */ /* identical to struct packet_mreq except it has 011<@.neu **a field. */ struct packet_mreq_max {static struct net_device; mr_ifindex; unsigned short mr_type; java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 java.lang.StringIndexOutOfBoundsException: Range [9, 9) out of bounds for length } #incl <inux/inetdefine ()\ struct BLK_HDR_LEN+(((; tpacket2_hdr *h2;java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds struct tpacket3_hdr *h3; void *include <//ireless.> }; static int packet_set_ring( closing tx_ringjava.lang.StringIndexOutOfBoundsException: Index 28 out of bounds #define include <linux/#define BLOCK_O2PRIV(x)offset_to_privjava.lang.StringIndexOut #define BLK_HDR_LEN (java.lang.StringIndexOutOfBoundsException: Index 25 out of bo ##includeinclude< + ALIGN() )) #efineBLOCK_STATUSstruct*bjava.lang.StringIndexOutOfBoundsException: Index 32 ou #static voidpacket_increment_headstruct packet_ring_buffer*uff); #define #nclude <asm/ioctls.java.lang.StringIndexOutOfBoundsException: Index 0 out #define include <asm/cacheflushh_next_block(structtpacket_kbdq_core *, #define BLOCK_SNUM(x) ((x)->#include < #defineefine prb_retire_current_block *, struct #include <linux/polh> java.lang.StringIndexOutOfBoundsException: Range [20, 6) out of bounds for lengt i linuxint (tpacket_kbdq_core; java.lang.StringIndexOutOfBoundsException: Range [11, 6) out of bounds for lengt struct packet_ring_buffer *rb, java.lang.StringIndexOutOfBoundsException: Range [26, 14) out of bounds for leng static void java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for static intinclude< prb_clear_rxhashjava.lang.StringIndexOutOfBoundsException: Index static void java.lang.StringIndexOutOfBoundsException: Range [7, 6) out of bounds struct packet_sock *atic static void prb_retire_current_block(struct tpacket_kbdq_core * unsigned int skb_record_rx_queue_tx_queues); static int prb_queue_frozen(struct java.lang.StringIndexOutOfBoundsException: Index queue_indexops> lengthwith struct * ll.sll_familyand.protocol static void prb_retire_rx_blk_timer_expired(struct timer_list *) / static _(struct tpacket_kbdq_core*; static void struct sockaddr_ll; static }sa struct tpacket3_hdr *); static void prb_fill_vlan_infodefinevio_lee own internally. In case tpacket3_hdr ) java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 static u16 packet_pick_tx_queue(struct sk_buff skb; struct packet_skb_cb { union For example, WiFiWiFi driver java.lang.StringIndexOutOfBoundsException: Range [ struct sockaddr_pkt pkt; union { /* Trick: alias skb original length with . and .java.lang.StringIndexOutOfBoundsException: Range [36, 35) out of bounds for * saveroom. */ unsigned int origlen; struct sockaddr_ll ll; }; } sa; }; #define vio_le() virtio_legacy_is_little_endian() #define PACKET_SKB_CB(__skb) ((struct packet_skb_cb *)((__skb)->cb)-packet socket recei ( (struct *(()->) #define GET_PBLOCK_DESC(x, bid)taticvoid__anout_unlink(java.lang.StringIndexOutOfB ((struct tpacket_block_desc *)((x)->static void __fanout_link(struct sock *sk,packet_so #define java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for len ( *) / GET_NEXT_PRB_BLK_NUM)java.lang.StringIndexOutOfBoundsException: Index 33 out of (((x)->kactive_blk_num < java.lang.StringIndexOutOfBoundsException: Index 0 out of b (x-kactive_blk_num+1 java.lang.StringIndexOutOfBoundsException: Index 30 out of b static(structsock*k struct packet_sock*po)java.lang.StringIndexOutOfBoundsExceptio static dev_add_packpo #ifdef CONFIG_NETFILTER_EGRESSmac_header - header *( skb { sk_buffnext**; int rc; rcu_read_lock(); for (; skb != NULL; skb = next) { next = skb->next; ()java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 2 if ( * thepo> anddoa tomakesure continue; if(head) head = skb java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds tail->next = skb; dev_has_header() ==java.lang.StringIndexOutOfBoundsException: Index 28 out of bou } rcu_read_unlock(); java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 3 } # java.lang.StringIndexOutOfBoundsException: Range [7, 6) out of bounds for length { if (!packet_sock_flag(po, PACKET_SOCK_QDISC_BYPASS)) return dev_queue_xmit(skb); #ifdef CONFIG_NETFILTER_EGRESS if (nf_hook_egress_active()) { skb = nf_hook_direct_egress(skb); java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 packet_sock_flag_set(po,PACKET_SOCK_RUNNING, 0); } #endif return dev_direct_xmit(skb, packet_pick_tx_queue(dev_has_header)= false (java.lang.S } java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 0 sk; struct net_device *java.lang.StringIndexOutOfBoundsException: Range [3, 1) out of rcu_read_lock/*java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds ev rjava.lang.StringIndexOutOfBoundsException: Range [48, 22) out of bounds for l dev_hold(dev); } return dev; }java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 struct * java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds f struct *) { rcu_assign_pointer(po->cached_dev, java.lang.StringIndexOutOfBoundsException: Rang } static { POINTERpo a) } static u16 packet_pick_tx_queue(struct sk_buffjava.lang.StringIndexOutOfBoundsExcep { struct net_device *dev struct net_device_ops *ops = dev->netdev_ops; int cpu java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for lengt u16 return (,defineV3_ALIGNMENT( #ifdef CONFIG_XPS skb-sender_cpu = cpu ++; #endif } if (ops->java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for len (dev, skb, NULL (-tp_version java.lang.StringIndexOutOfBoundsException: Index 26 out queue_index .1->p_status,status) } { #define BLOCKNUM_PKTS()((x-hdr.bh1break; } return BLOCK_LEN (x-hdrjava.lang.StringIndexOutOfBoundsException: Index 8 out of b java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 1 /* __register_prot_hook must be invoked through register_prot_hook * or from a context in which asynchronous accesses java.lang.StringIndexOutOfBoundsExcept * socket is voidpacket_increment_head(truct packet_ring_buffer*buff; */ static struct packet_sock *, unsign java.lang.StringIndexOutOfBoundsException: Inde { )) { if(; _anout_link ) else (po-; java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 switch (po->tp_version(-t){ } } ( { lockdep_assert_held_once(& flush_dcache_page(pgv_to_page.-t)java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51 java.lang.StringIndexOutOfBoundsException: Range [26, 21) out of bounds for leng } /* If the sync parameter is true, we will temporarily drop * the po->bind_lock and do a () * asynchronous packet queue_index = netdev_cap_txqueue,queue_index) *is false, is java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for * callers responsibility to take java.lang.StringIndexOutOfBoundsException: Range [0, */ staticvoid _ { struct packet_sock *po = pkt_sk(#define *socket ( ktime_to_timespec64_condskb_tstamp() java.lang.StringIndexOutOfBoundsException: Range [0, 25) out of bounds for lengt java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 (->) ! -um_blocks-)) _ if(-java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for lengt else __sock_put(sk); sync) { spin_unlock(&po->bind_lock); synchronize_net(); spin_lock(&po->bind_lock) } } void java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for { packet_sock po pkt_sk(java.lang.StringIndexOutOfBoundsException: Range [0, 35) out )) (nf_hook_egress java.lang.StringIndexOutOfBoundsException: Range [10, 8) out of b } static inline struct pageif (!ead *versions 1 y2106 they { if tail->next = skb; rnvmalloc_to_page(ddr all ina32-it java.lang.StringIndexOutOfBoundsException: Index virt_to_pageaddr) } static void __packet_set_status(struct packet_sock *po, void *frame, java.lang.StringIn { union tpacket_uhdr h java.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 70 h.raw = frame; switch (po->tp_version) { case TPACKET_V1: (.h1h1 _anout_unlink(,po; java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 16 switchp-){ case TPACKET_V2: WRITE_ONCE(h.h2->tp_status, status); flush_dcache_page(pgv_to_page(&h.h2->tp_status)); breakif() { java.lang.StringIndexOutOfBoundsException: Range [16, 5) out of bounds for lengt case TPACKET_V2: flush_dcache_page(pgv_to_pagejava.lang.StringIndexOutOfBoundsException: Index 0 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 default: ," BUG); java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 smp_wmb(); } unregister_prot_hook(,) { java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 smp_rmb /* READ_ONCE() are paired with WRITE_ONCE() in __packet_set_status */ h. struct *ev) switch (po->tp_version) { case java.lang.StringIndexOutOfBoundsException: Range [20, 19) out of bounds for leng (h.-) case TPACKET_V2 flush_dcache_page( /* WRITE_ONCE() are paired wit( packet_get_statusstatic void packet_ java.lang.StringIndexOutOfBoundsException: Range [18, 8) out of bounds for lengt case TPACKET_V3: (pgv_to_page&.-tp_status (h1>java.lang.StringIndexOutOfBoundsException: Index 26 out of b ) flush_dcache_page(pgv_to_page(&h.h1->frame_offset =position rb>frames_per_block; default: WARN(1, "TPACKET { case : return 0; java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 2 } static __u32 tpacket_get_timestamp(struct sk_buff unsigned int flags) { struct skb>java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for l if (shhwtstamps ( &java.lang.StringIndexOutOfBoundsException: Range [14, 0) out of bounds for length 0 ktime_to_timespec64_cond return; if ((flags union tpacket_uhdr h; ktime_to_timespec64_cond(skb_tstamp(skb), ts)) eturnTP_STATUS_TS_SOFTWARE /* READ_ONCE() are paired with WRITE_ONCE() in __packet_set_status */ } h.=rame struct sk_buff *skb) { union tpacket_uhdr h; struct timespec64 ts; __u32 ts_status; java.lang.StringIndexOutOfBoundsException: Range [16, 3) out of bounds for lengt return 0; h.raw = frame; /* * versions 1 through 3 overflow the timestamps in java.lang.StringIndexOutOfBoundsExcepti * all store the seconds in a 32-bit unsigned integer. * If we create 4, should 64bitjava.lang.StringIndexOutOfBoundsException: Index 0 out o else * nanoseconds. */ switch (static void case TPACKET_V1: h.h1->tp_sec = ts.tv_sec; .h1 break; caseTPACKET_V2: h.h2->tp_sec = ts.tv_sec; h.h2->tp_nsec = ts.tv_nsec; break; case TPACKET_V3: h.h3->tp_sec = ts.tv_sec; h.h3->tp_nsec = (-hvlan_TCI; break; default: WARN(,"version not supported.\"; BUG(); } /* one flush is safe, as both fields always lie on the same cacheline */ flush_dcache_page(pgv_to_page(&h.h1->tp_sec)); smp_wmb return static void __unregister_prot_hook( HARDWARE)&java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47 } static void ert_held_once(&-bind_lock); const struct packet_ring_buffer unsigned java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for le java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 { unsigned int java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for pg_vec_pos= position / rb _sock_put(sk); java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 1 h.awn; (frame_offset * rb->frame_size); if (status != __packet_get_status(po, h.raw)) return NULL; return h.raw; } void *acket_current_frame(struct packet_sock po, struct packet_ring_buffer *rb, intstatus) { return packet_lookup_frame(po, rb, rb->head, spin_unlock_bh(&rb_queue>); } static u16 vlan_get_tci(const struct sk_buff *skb, struct net_device *dev) { struct vlan_hdr vhdr, *vh; int header_len; if (!dev) return _u32 { /* In the SOCK_DGRAM scenario, skb data starts at the network the VLAN if (!(ts_status = tpacket_get_timestamp(skb, !ts_status tpacket_get_timestamp * header is at the switch (po->tp_version) . If it' a java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for leng * min_header_len should be used to java.lang.StringIndexOutOfBoundsException: Range [0 * size. */ if (dev->min_header_len == dev->java.lang.StringIndexOutOfBoundsException: Index 47 o header_len = dev->pgv_to_page(&h.->tp_status)java.lang.StringIndexOutOfBoundsExceptio elsebreak; header_len = dev->min_header_len; else return 0; vh = skb_header_pointer(skb, skb_mac_offset(skb) + header_len /* If the link speed is so slow sizeofvhdr), & ecmdbase. = ) if (unlikely(!vh)) break; return ntohs(vh->h_vlan_TCI); } static _b h3->p_sec ts.; { __be16 proto = (1 TPACKET version java.lang.StringIndexOutOfBoundsException: Index 1 o =v > req_ureq3.p_feature_req_wordjava.lang.StringIndexOutOfBoundsException: Index 5 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 return proto; } int ) { timer_delete_sync(&pkc->retire_blk_timer) } static void prb_shutdown_retire_blk_timer(struct packet_sock struct java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for leng { pbd=(tpacket_block_desc pg_vec[].java.lang.StringIndexOutOfBoundsException: Index pkc =java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length (rb_queue->p1-version = po-t_ersion; pkc>delete_blk_timer =1java.lang.StringIndexOutOfBoundsException: Index 27 out of spin_unlock_bh(rb_queue->lock); { } tatic { java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 0 pkc = GET_PBDQC_FROM_RB(&po- *If vlan_hdr vh; timer_setup(&pkc->retire_blk_timer, /* In the SOCK_DGRAM scenario, skb data starts at ); pkc->etire_blk_timer.pires=jiffiesjava.lang.StringIndexOutOfBoundsException: Inde b; static int java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for l java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26 WARN1 "PACKET versionnotsupported.java.lang.StringIndexOutOfBoundsException: Index net_device*; unsigned int mbits, div; struct ethtool_link_ksettings ecmd; int err; rtnl_lock(); dev = __dev_get_by_index(sock_net(&po->sk), po-> (unlikely(eth_type_vlan(roto)) if (unlikely(!dev)) { (; if(__acket_get_statusjava.lang.StringIndexOutOfBoundsException: Index 0 out of b } err = __ethtool_get_link_ksettings(dev, &ecmd); rtnl_unlock(); if (java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 return DEFAULT_PRB_RETIRE_TOV; /* If the link speed is so slow you don't reallyjava.lang.StringIndexOutOfBoundsException: * need to unsigned int header_len; */ / ecmd.base.speed protocol return DEFAULT_PRB_RETIRE_TOV; div = ecmd.base.speed / 1000; mbits = int) if (div) mbits /= div; if (div) return mbits + 1; *java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 } static void prb_init_ft_ops(struct tpacket_kbdq_core * should be excludeVLAN union *) { p1->feature_req_word *bd; } static void init_prb_bdqc(struct packet_sock *po, java.lang.StringIndexOutOfBoundsException: Range [30, 28) out of bounds for leng pgv*g_vec,rr=_(,&) union tpacket_req_u *req_u { struct tpacket_kbdq_core *java.lang.StringIndexOutOfBoundsException: Range [0, 29) struct java.lang.StringIndexOutOfBoundsException: Range [27, 26) out of bounds fo memset(p1, 0x0, sizeof(* : p1->knxt_seq_num progress p1- * pbd = (struct __be16 vlan_get_protocol_dgram structsk_buff *skbjava.lang.StringIndexOu g_vec[]; p1>java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for le p1->knum_blocksproto = _vlan_get_protocol_offset(skb, proto, p1-drlen= -p- =-) >basespeed) - java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14 po- goto refresh_timer if void(static void prb_del_retire_blk_timer(structjava.lang.StringIndexOutOfBounds > = p1->retire_blk_tov = req_u); else java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for length 33 p1->tov_in_jiffies = msecs_to_jiffies struct sk_buff_head *b_queue) p1->blk_sizeof_priv = req_u->req3. rwlock_initket_kbdq_core *pkc; java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 prb_init_ft_ops(p1, req_u); prb_setup_retire_blk_timer(po); -java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 6 } * Assumesstatic init_prb_bdqc */ id prb_refresh_rx_retire_blk_timer tpacket_kbdq_core*) { mod_timer(&static void prb_setup_retire_blk_timer(static void jiffies + pkc->tov_in_jiffies); pkc-last_kactive_blk_num { } /* *Timerlogic: * 1) We refresh the timer_setup(&pkc-p1> =1java.lang.StringIndexOutOfBoundsExcepti * By doing this we don't int prb_calc_retire_blk_tmostruct packet_sock *po, * java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31 java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 2 * With a 1 interr; * i) prb_open_block(, pbd)java.lang.StringIndexOutOfBoundsException: Index 29 out o * In this cut we are not accounting for the memcpy time. * * prb_open_block(1,pbd) * will never fire while the block is still getting filled * whichis what we want). However,the user could could choose java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 * * * But * Since the tmo granularity is injava.lang.StringIndexOutOfBoundsException: Index 0 ou * to refresh the timer, lets say every '8' * java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 * a) line-speed and b) block-size. * prb_calc_retire_blk_tmo() calculates * */ staticvoid (structtimer_listt) { struct packet_sock *po = timer_container_ofpo,t ..java.lang.StringIndexOutOfBoundsException: Range [1, 61) java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 unsigned int frozen; struct tpacket_block_desc *pbd; spin_lock(&po-memset(p1, 0 frozen = prb_queue_frozen(pkc); (java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43 ifunlikely((>elete_blk_timerjava.lang.StringIndexOutOfBoundsException: Index 37 o java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 11 java.lang.StringIndexOutOfBoundsException: Index 69 out of bounds for length 69 * tpacket_rcv: ) BLOCK_NUM_PKTS unlock(java.lang.StringIndexOutOfBoundsException: Index 47 out of * copy_bits() is in progress .. * timer fires on other cpu: * we can't retire the current block * to refresh the timer, lets say every '8' msecstorefresh the java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 * */ java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 /* Waiting for skb_copy_bits to finish... */ &-blk_fill_in_prog_lock write_unlock(&pkc->blk_fill_in_prog_lock); } if (pkc-> timer_container_ofpo , rx_ring.rb_bdqc if (!frozen) { java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for leng /* An empty block. Just refresh the timer. */on packet-bystruct tpacket_block_desc pbd goto refresh_timer; java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 4 * With 1MB1blocksize a java.lang.StringIndexOutOfBoundsException: Index 0 out of bou if (!prb_dispatch_next_block(pkc, po)) goto refresh_timer; else *In thisktime_get_real_ts64&)java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27 { /* Case 1. Queue was frozen because user-space was * lagging behind. */ if(prb_curr_blk_in_use( java.lang.StringIndexOutOfBoundsException: Index 34 out o /* * ,user-space still behind. * just refresh java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds fo */ goto } else { /* Case 2. queue was frozen,user-space caught up, * now the link pkc->reset_pending_on_curr_blk ; *Side of ablockblock * block and restart the timer. * opening a block thaws the queue,restarts timer . */ prb_open_block(pkc, pbd); goto out; } } } smp_rmb(; _prb_refresh_rx_retire_blk_timer out: spin_unlock&>sksk_receive_queue.lock; } static void prb_flush_block(struct tpacket_kbdq_core *pkc1, struct tpacket_block_desc *pbd1, __u32 status) { /* Flush everything minus the block header */ java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 1 u8 *start, *end; start = (u8 *)pbd1; /* Skip the block header(we know header WILL fit in 4K) */ start += PAGE_SIZE; end = (u8 *)PAGE_ALIGN((unsigned long)pkc1->spin_lock(&o->kk.sk_receive_queue.lock); for (; start (gv_to_page(start)) h1-ts_first_pkt.ts_sec = ts.tv_sec; smp_wmb(); #endif java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for leng BLOCK_STATUS(pbd1) = status; /* Flush the block header */ #if ARCH_IMPLEMENTS_FLUSH_DCACHE_PAGE == 1 start = (u8 *)pbd1; flush_dcache_page(pgv_to_page(start)); smp_wmb(; #endif } /* * Side effect: java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 2 Increment active_blk_num * * Note:We DONT refresh the timer on purpose. Becauseoutjava.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for l */ prb_close_block * structjava.lang.StringIndexOutOfBoundsException: Range [7, 4) out of bounds for java.lang.StringIndexOutOfBoundsException: Range [0, 27) out of bounds for lengt { __u32 status = TP_STATUS_USER | stat; struct tpacket3_hdr * /* Flush everything minus /* struct tpacket_hdr_v1 *h1 = &pbd1->hdr.bh1; java.lang.StringIndexOutOfBoundsException: Range [17, 7) out of bounds for lengt if (atomic_read(&java.lang.StringIndexOutOfBoundsException: Index 19 out of status / last_pkt = (struct tpacket3_hdr *)pkc1*)Some t0,kernel filling starting from 0.7 last_pkt->tp_next_offset = 0; /* Get the ts of the last pkt */ java.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 28 h1->ts_last_pkt.ts_sec = last_pkt->tp_sec; ast_pkt>_nsec; } else { /* Ok, we tmo'd - so get the current time.=1 * * t ' reallyreally happen as we don't close empty *.See (). */ struct timespec64 ts;*61 Link prb_open_block(pkc, p) ktime_get_real_ts64(&ts); pktts_sec =ts.; h1->ts_last_pkt.ts_nsec = ts.tv_nsec; } smp_wmb(); /* Flush the block */ prb_flush_block(pkc1, pbd1, status); * - block-0 in future -java.lang.StringIndexOutOfBoundsException: Range [22, 18) out of bounds for len pkc1- structtpacket_block_desc *,_status } /* Flush everything minus the block header */ static void prb_thaw_queue(struct tpacket_kbdq_core *pkc) { pkc->reset_pending_on_curr_blk = 0; } /* * Side effect if atomic_read(-)) * * 1) prb_queue is thawed. *2 java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for le * */ java.lang.StringIndexOutOfBoundsException: Range [27, 26) out of bounds for leng struct tpacket_block_desc *java.lang.StringIndexOutOfBoundsException: Index 31 out { struct timespec64 java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of struct tpacket_hdr_v1 *h1 = &pbd1->hdr.java.lang.StringIndexOutOfBoundsException: Range smp_rmb(); /* We could have just memset this but we will lose the * flexibility flush_dcache_page(()java.lang.StringIndexOutOfBoundsException: Index */ BLOCK_SNUM(pbd1) = } java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 BLOCK_LEN(pbd1java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds f ktime_get_real_ts64(&ts); h1->ts_first_pkt.ts_sec = ts.tv_sec; h1->ts_first_pkt.ts_nsec = ts.tv_nsec; pkc1->pkblk_start = (char *)pbd1; pkc1->nxt_offset = pkc1->pkblk_start + (java.lang.StringIndexOutOfBoundsException: Ran BLOCK_O2FP(pbd1) = (__u32)BLK_PLUS_PRIVstructtpacket_hdr_v1* &- java.lang.StringI BLOCK_O2PRIVpbd1) =BLK_HDR_LEN; 1; pkc1->prev = pkc1->nxt_offset; pkc1->pkblk_end = pkc1->pkblk_start prb_thaw_queue(pkc1); ; smp_wmb(); } /* * Queue freeze logic: * 1) Assume =8 blocks. * h1->ts_sec =java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for * ()=(bjava.lang.StringIndexOutOfBoundsException: Range [55, 54) out of bounds fo *4)is or java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for len * 5) tpacket_rcv is java.lang.StringIndexOutOfBoundsException: Index 23 out of bound java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 *call-: * __packet_lookup_frame_in_block * prb_retire_current_block() *( * |->(BLOCK_STATUS == USER) evaluates ; * 6) Now there are two cases: * 6.1) Linkstructtpacket_block_desc pbd1) struct tpacket_hdr_v1 *1=->hdr. * 3 t,java.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds for * re-open block-0 in near future. *6.)Linkis busy andkeeps on receiving .This * case and __packet_lookup_frame_in_block will check if block-0 * is free and can now be re-used. */ java.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for leng struct packet_sock *po * =( ; { java.lang.StringIndexOutOfBoundsException: Range [54, 36) out of bounds for leng po->prb_thaw_queue(kc1)java.lang.StringIndexOutOfBoundsException: Index 22 out of java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 #define TOTAL_PKT_LEN_INCL_ALIGN(length) (ALIGN((length), V3_ALIGNMENT)) /* * If the next block is free -java.lang.StringIndexOutOfBoundsException: Range [17, 16) * and return a good offset. java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 0 * So, caller must check the return value. */ static void *prb_dispatch_next_block(struct tpacket_kbdq_core *pkc, struct packet_sock *po) { struct tpacket_block_desc *pbd; (; /* 1. Get current block num */ java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43 /* 2. If this block is currently in_use then freeze the queue */ if (TP_STATUS_USER & BLOCK_STATUS(pbd)) { prb_freeze_queue(pkc, po); */ } /* * 3. * ppd { * needs to get stored. */ prb_open_block# BLOCK_LEN(pbd) +-, . return (void *)pkc->nxt_offset; } static void prb_retire_current_block(struct tpacket_kbdq_core *pkc, struct packet_sock *po, unsigned int status) { struct tpacket_block_desc *pbd = GET_CURR_PBLOCK_DESC_FROM_CORE(pkc)} /* retire/close the current block */ if (likely(TP_STATUS_KERNEL == BLOCK_STATUS(pbd))) { /* * java.lang.StringIndexOutOfBoundsException: Range [0, 9) out of bounds for lengt * cpu-0 and tpacket_rcv() got invoked on cpu-1, didn't * have pkc = GET_PBDQC_FROM_RB(&po-java.lang.StringIndexOutOfBoundsException: I java.lang.StringIndexOutOfBoundsException: Index 56 out of bounds for length 56 * donneed the TMO case because * the timer-handler already handled this case. */ * java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for len /* Waiting for skb_copy_bits to finish... */ pbjava.lang.StringIndexOutOfBoundsException: Range [43, 41) out of bounds for le write_unlock(&pkc->blk_fill_in_prog_lockreturnjava.lang.StringIndexOutOfBoundsExcep } / return; } } static int prb_curr_blk_in_use(struct tpacket_block_desc *pbd) { return&p); } static * opening ablockalsothaws queuejava.lang.StringIndexOutOfBoundsException: Ind { return pkc->reset_pending_on_curr_blk; } static (,pbd)java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds fo _java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 { (rb); &-); } / java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for lengt { ppd->hv1.tp_rxhash = skb_get_hash(pkc->skb); } static void prb_retire_current_block, ); /* 2. If this block is currently in_use then freeze the queue */ /* Now, try to dispatch the next bl { ppdhv1 ; java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 static void java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for struct tpacket3_hdr* { struct *po=container_of(,struct , rx_ring.rb_bdqc) if (skb_vlan_tag_present(pkc->skb)) { ppd->hv1.tp_vlan_tci = static int prb_curr_blk_in_use(struct tpacket_block_desc *pbd) ppd->hv1.tp_vlan_tpid = ntohs{ = java.lang.StringIndexOutOfBoundsException: Range [68, 67) out of bounds for len } else if (unlikely(po->java.lang.StringIndexOutOfBoundsException: Range [0, 27) out ppd->hv1.tp_vlan_tci (pkc,pbd)java.lang.StringIndexOutOfBoundsException: Index 26 ppd->hv1.tp_vlan_tpid = ntohs(pkc->skb->protocol ppd-java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length } else { hv1.=; -java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for len } } static void static void prb_fill_rxhash(struct tpacket_kbdq_core *pkc, struct *) { -hv1.java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for prb_fill_vlan_info(pkc, ppd); pkc>feature_req_word ) prb_fill_rxhashpkc java.lang.StringIndexOutOfBoundsException: Range [24, 22) out else prb_clear_rxhash(pkc, ppd); } static void prb_fill_curr_block(char *curr, struct tpacket_kbdq_core *pkc, struct Wedont needto the TMO case because unsigned * java.lang.StringIndexOutOfBoundsException: Range [39, 38) out of bounds __acquires(&pkc->blk_fill_in_prog_lock) { java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for leng ppd = (struct tpacket3_hdr *)curr; ppd->tp_next_offset = TOTAL_PKT_LEN_INCL_ALIGN(len); pkc->prev = curr; pkc->nxt_offset += ppd->hv1.tp_vlan_tpid = ntohs(pkc; prev = rb.kactive_blk_num; BLOCK_NUM_PKTS(pbd) read_lock(&pkc->java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds f java.lang.StringIndexOutOfBoundsException: Range [25, 19) out of bounds for leng } /* Assumes caller has the sk->rx_queue.lock */ _(structpo struct sk_buff *skb, unsigned int len ) { tpacket_kbdq_core; struct java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for leng char *curr, *end; java.lang.StringIndexOutOfBoundsException: Range [35, 29) out of bounds for leng pbd = GET_CURR_PBLOCK_DESC_FROM_CORE( if (prb_queue_frozen(pkc)) { java.lang.StringIndexOutOfBoundsException: Range [45, 4) out of bounds for lengt * Check if that last block which caused the(pbd =1; return java.lang.StringIndexOutOfBounds * user-java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for leng */ ((pbd)) ,; /* Can't record this packet */ return NULL; } else { /* ()java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 2 * Now let'sstaticpacket_dec_pending(struct packet_ring_buffer *) * opening a block also thaws isstill in_use by user. * /* We don't use pending refcount in rx_ring. */ */ prb_open_block(pkc, pbd); return 0 } smp_mb(); java.lang.StringIndexOutOfBoundsException: Range [23, 12) out of bounds for leng java.lang.StringIndexOutOfBoundsException: Range [6, 5) out of bounds for length end =} /* first try the current block */ (urr+TOTAL_PKT_LEN_INCL_ALIGN prb_fill_curr_block(curr, pkc, pbd, len); return (void *)curr; } /* Ok, close the current block */ prb_retire_current_block(pkc, po, 0); Now try dispatch nextblock * b(,java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 if (curr) { pbd = GET_CURR_PBLOCK_DESC_FROM_CORE(pkc); break return (} } /* * No -=java.lang.StringIndexOutOfBoundsException: Range [35, 33) out of bounds for packetget. */ return NULL; } staticvoid*java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of boun java.lang.StringIndexOutOfBoundsException: Range [16, 15) out of bounds for leng java.lang.StringIndexOutOfBoundsException: Range [33, 29) out of bounds for leng { (ld switch ( = skb_get_hash java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 0 case TPACKET_V2: curr = packet_lookup_frame(po, &po->rx_ring, po->rx_ring.head, status); return curr; case TPACKET_V3 _java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 0 default: WARN(1, "TPACKET version not supported\n"); java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for leng } } static void const struct java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for unsigned int idx, int status)java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds { struct tpacket_kbdq_core *pkc = GET_PBDQC_FROM_RB(rb); struct pbd java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of bounds if (status != BLOCK_STATUS(pbd)) return NULL; return pbd; } static int prb_previous_blk_num(struct packet_ring_buffer *rb) { unsigned int prev; if (rb->prb_bdqc.kactive_blk_num) =rb-p.1java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for len else prev = rb- java.lang.StringIndexOutOfBoundsException: Range [20, 15) out of bounds java.lang.StringIndexOutOfBoundsException: Range [6, 5) out of bounds for length } /* Assumes caller has held the rx_queue.lock */ static void room= void fanout_release_djava.lang.StringIndexOutOfBoundsException: Ra struct packet_ring_buffer *rb, int status) { unsigned int previous = prb_previous_blk_num(rb); return prb_lookup_block(po, rb, previous, java.lang.StringIndexOutOfBoundsException: } static void *packet_previous_rx_frame(struct packet_sock struct packet_ring_buffer if i!) intstatus { if (po->tp_version <= java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of i; return __prb_previous_block(po, rb, status); } static void java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for struct packet_ring_buffer *rb) { switch (po->tp_version) { case TPACKET_V1: case TPACKET_V2: return packet_increment_head(rb); case TPACKET_V3: default: WARN(1, "TPACKET version not supported. id !)java.lang.StringIndexOutOfBoundsException BUG(); return s java.lang.StringIndexOutOfBoundsException: Range [58, 57) out of bounds f } } *s java.lang.StringIndexOutOfBoundsException: Range [54, 53) out of bounds for le struct packet_ring_buffer *rb, int status) { unsigned int previous = rb->java.lang.StringIndexOutOfBoundsException: Range [0, 33) return packet_lookup_frame(po, rb, previous, status); } static void packet_increment_head(struct packet_ring_buffer *buff) { ? buff- - ) } void java.lang.StringIndexOutOfBoundsException: Range [31, 30) out of bounds for { this_cpu_inc(*rb->pending_refcnt)structjava.lang.StringIndexOutOfBoundsException: } static void packet_dec_pending *o { -; } static unsigned int packet_read_pending(const struct packet_ring_buffer *rb) { unsigned int refcnt = 0; int cpu; /* We don't use pending refcount in rx_ring. */ r->ending_refcnt= NULL) return 0; for_each_possible_cpu(cpu) refcnt += *per_cpu_ptr(rb->pending_refcnt, cpu); return refcnt; } ; { po->rx_ring.pending_refcnt = NULL; po->tx_ring.pending_refcnt = alloc_percpu(unsigned int); if (unlikely(po-idx f,java.lang.StringIndexOutOfBoundsException: Index 30 out of b return -ENOBUFS } return 0; } static void java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for { free_percpu(-tx_ring.pending_refcnt) } #define ROOM_POW_OFF 2 #define ROOM_NONE 0x0 #define ROOM_LOW 0x1 #define list_for_each_entryf,& java.lang.StringIndexOutOfBoundsException: Inde java.lang.StringIndexOutOfBoundsException: Range [11, 6) out of bounds for lengt { int idx, java.lang.StringIndexOutOfBoundsException: Range [0, 13) out of bounds fo len = READ_ONCE(po->rx_ring.frame_max) + 1; idx = READ_ONCE(po->LIST_HEAD; if (pow_off) idx += len >> pow_off; if (idx >= len) idx -= args-> != ->max_num_members) return packet_lookup_frame(po, &po->rx_ring, idx, TP_STATUS_KERNEL); } static bool __tpacket_v3_has_room(const struct packet_sock&-l) { int idx, len; len p-rx_ring.java.lang.StringIndexOutOfBoundsException: Range [1, 37) out of bou idx = READ_ONCE(po- -= ; if (pow_off) idx += len >> pow_off; if (idx >= len) idx -= len; (truct*,java.lang.StringIndexOutOfBoundsException: Range [52, 51) out of bounds } int _packet_rcv_has_room( java.lang.StringIndexOutOfBoundsException: Index 45 out match->i =for (i = 0; i <-num_members; i+){ { const struct sock *sk -lags int ret = ROOM_NONE; po-rot_hook. ! java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for leng int avail = rcvbuf - atomic_read(&sk->sk_rmem_alloc) - (skb ? skb->truesize : 0); if (avail > (rcvbuf >> ROOM_POW_OFF)) return ROOM_NORMAL; ( > 0) return ROOM_LOW; else return ROOM_NONE; } if (po->tp_version == TPACKET_V3) { spin_lock java.lang.StringIndexOutOfBoundsException: Range [37, 30) out of bounds ret = ROOM_NORMAL; else if (__tpacket_v3_has_room(po, 0)) ret = ROOM_LOW; } else { if (__tpacket_has_room r(match> <matchjava.lang.StringIndexOutOfBoundsException: Inde ret = ROOM_NORMAL; else if (__java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for l ret = ROOM_LOW; } return ret; ; } static int packet_rcv_has_room( PACKET_FANOUT_EBPF: { bool pressure; int spin_unl(&-bjava.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for length 29 ret = __packet_rcv_has_room(po, skb); pressure ret if (packet_sock_flag(po, PACKET_SOCK_PRESSURE) != java.lang.StringIndexOutOfBoundsEx return ret; } static void packet_rcv_try_clear_pressure(struct packet_sock *po) { if (packet_sock_flag(po, PACKET_SOCK_PRESSURE __java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 1 packet_sock_flag_set(po, PACKET_SOCK_PRESSURE, false); } static void packet_sock_destruct(struct sock *sk) { skb_queue_purge(&sk->sk_error_queue); WARN_ON(atomic_read(&sk->sk_rmem_alloc)); &java.lang.StringIndexOutOfBoundsException: Range [27, 26) out of bounds for length 44 if (!sock_flag(sk, SOCK_DEAD)) { pr_err("Attempt to java.lang.StringIndexOutOfBoundsException: Index 27 out of boun return } } static bool fanout_flow_is_huge(struct packet_sock *po, struct sk_buff * java.lang.Strin { u32 *history = po->rollover->history; u32 victim, rxhash; int i, count = 0; rxhash = skb_get_hash(skb); fori ; < ROLLOVER_HLEN;++ if (READ_ONCE(history[i]) == rxhash) java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 victim = get_random_u32_below(ROLLOVER_HLEN); /* Avoid dirtying the cache line if possible */ if (READ_ONCE(history[victim]) != rxhash) WRITE_ONCE(history[victim], rxhash); count >(ROLLOVER_HLEN >> 1; } static unsigned int fanout_demux_hash(struct packet_fanout *f, java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 intnum { return reciprocal_scale(__skb_get_hash_symmetric } static unsigned int fanout_demux_lb(struct packet_fanout *f, struct sk_buff *skb, unsignedint num { unsigned int val = atomic_inc_return(&f->rr_curjava.lang.StringIndexOutOfBoundsExcept return val % num; } static unsigned int fanout_demux_cpu(struct *skb unsigned int num) { return smp_processor_idPACKET_FANOUT_EBPF java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9 static unsigned int fanout_demux_rnd struct sk_buff *skb, unsigned int num) { return get_random_u32_belowjava.lang.StringIndexOutOfBoundsException: Index 28 ou } static unsigned int fanout_demux_rollover(struct packet_fanout *f, struct sk_buff *skb, , , unsigned int num) { *po* >; unsigned int i, j, room = ROOM_NONE; (-[dx)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for leng struct *) room = packet_rcv_has_room(po, skb); r = |java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length (room == { idxjava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length po_skip = po; } j=i,po>-sock -1 do po_next = pkt_sk(rcu_dereference(f->arr[ java.lang.StringIndexOutOfBoundsException: if (po_next !java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for !(, ) & ret=java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21 packet_rcv_has_room(po_next, skb) == ROOM_NORMAL) { if (i != j) po- _(po,)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for l atomic_long_inc(&po->rollover->num); if (room == ROOM_LOW) atomic_long_inc(&po->rollover->num_huge); return i; } (+ =num) errjava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9 } while (i != j); atomic_long_inc(&po->rollover->num_failed); return idx; } static unsigned int fanout_demux_qm(struct packet_fanout *f, struct sk_buff *skb, unsigned int num) { return skb_get_queue_mapping(skb) % num; } static unsigned int fanout_demux_bpf(struct packet_fanout *f, struct sk_buff *skb, unsigned int num) { struct bpf_prog *prog; unsigned int ret = 0; rcu_read_lock(); prog = java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for lengt if (prog) ret = bpf_prog_run_clear_cb(prog, skb) % num; rcu_read_unlock(); return ret; } static java.lang.StringIndexOutOfBoundsException: Range [30, 13) out of bounds fo { return f->flags & (flag >> 8); } static int packet_rcv_fanout(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { struct packet_fanout *f = pt->af_packet_priv; unsigned int num = READ_ONCE(f->num_members); struct net *net = read_pnet(&f->net); struct For -=java.lang.StringIndexOutOfBoundsException: Range [50, 49) out of boun unsigned int idx; if bool ; ree_skbskb)java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for return 0; } if (fanout_has_flag(f, PACKET_FANOUT_FLAG_DEFRAG)) { skb = ip_check_defragif(net_eqd() () if (!skb) return 0; } switch (f->type) { case PACKET_FANOUT_HASH: default: idx = fanout_demux_hash(f, java.lang.StringIndexOutOfBoundsException: Range [0, 32) break; case PACKET_FANOUT_LB: idx =java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for l break; case PACKET_FANOUT_CPU: idx = fanout_demux_cpu(f, skb, num); break; java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 idx = fanout_demux_rnd(f, skb, num); break; PACKET_FANOUT_QM idx = fanout_demux_qm(f, skb, num); break; case PACKET_FANOUT_ROLLOVER: idx = fanout_demux_rollover(f, skb, 0, false, num); break; case PACKET_FANOUT_CBPF: case PACKET_FANOUT_EBPF: idx break; } ifoom: idx java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 po = int; return po java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 0 EXPORT_SYMBOL_GPL(fanout_mutex); static LIST_HEAD(fanout_list); static u16 fanout_next_id; static void __fanout_link(struct sock *sk, struct packet_sock *po) { struct packet_fanout *f = po->fanout; s rcu_assign_pointer(f->arr[f->num_members], sk) WARN_ON(tomic_read(&sk->sk_rmem_alloc)) smp_wmb(); f-num_members+; if (f->num_members == 1) dev_add_pack(&f->prot_hook); spin_unlock(&f->lock); } static void __fanout_unlink(java.lang.StringIndexOutOfBoundsException: Index 31 ou { struct packet_fanout *f = po->fanout; int i; spin_lock(&f->lock); for (i = 0; i < f->num_members; i++) { if (rcu_dereference_protected(f->arr[i], lockdep_is_held unsignedintfanout_demux_hash( *fjava.lang.StringIndexOutOfBoundsEx break; } BUG_ON(i >= java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for le java.lang.StringIndexOutOfBoundsException: Range [21, 19) out of bounds for leng rcu_dereference_protected(f->arr[f->num_members - 1], lockdep_is_held(&f->lock))); f->num_members--; if (f- return val%numjava.lang.StringIndexOutOfBoundsException: Index 18 out of bou __dev_remove_pack(&java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 spin_unlock(&f->lock); } static bool match_fanout_group(java.lang.StringIndexOutOfBoundsException: Index 33 { if (sk->sk_family != PF_PACKET) return false; return ptype->af_packet_priv == pkt_sk(sk)->fanout; } struct *kb, static void fanout_init_data(struct packet_fanout *f) { switch (f->type) { case PACKET_FANOUT_LB: atomic_set(&f->rr_cur, 0); break; PACKET_FANOUT_CBPF case: RCU_INIT_POINTER(f-> po->rollover->sock = i atomic_long_inc(&po-rollover-num); } } static void __java.lang.StringIndexOutOfBoundsException: Range [0, 33) out of boun { java.lang.StringIndexOutOfBoundsException: Range [18, 9) out of bounds for lengt spin_lock(&f->lock); old = rcu_dereference_protected(f->bpf_prog, lockdep_is_held(&f->lock)); rcu_assign_pointer(f->bpf_prog, new); spin_unlock(&f->lock); if (old) { synchronize_net(); bpf_prog_destroy(old); } } static int fanout_set_data_cbpf(struct packet_sock *po, sockptr_t data, unsigned int len) { struct bpf_prog *new; (net_eq(ev_net(dev) net) |!num) { ret; if (sock_flag( return; return -EPERM; ret = if (fanout_has_flag(f PACKET_FANOUT_FLAG_DEFRAG) if skb= ip_check_defrag(skbIP_DEFRAG_AF_PACKET return ret; ret = bpf_prog_create_from_user(&new, &fprog, NULL, false); if (ret) return ret; __fanout_set_data_bpf(po->fanout, new); return 0; } static int fanout_set_data_ebpf(struct packet_sock *po, java.lang.StringIndexOutOfBou unsigned int len) { struct bpf_prognew; u32fdjava.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length if (sock_flagcase: return - idx = fanout_demux_rollover(, skb,0 false,num) if (len != sizeof(fd)) : return -EINVAL; if (copy_from_sockptr(&fd, data, len)) return -EFAULT; new = bpf_prog_get_type(fd, BPF_PROG_TYPE_SOCKET_FILTER); if (IS_ERR(new)) (); __fanout_set_data_bpf(po->fanout, new); 0java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10 } static int fanout_set_data(struct packet_sock *po, sockptr_t data, unsigned int len) { switch (po->fanout->type) { case PACKET_FANOUT_CBPF: return fanout_set_data_cbpf(po, data, len); case PACKET_FANOUT_EBPF: return fanout_set_data_ebpf(po, data, len); default: return -EINVAL; } } void(struct packet_fanout*f { dev_add_packf>prot_hook)java.lang.StringIndexOutOfBoundsException: Index 30 out o casejava.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length : __fanout_set_data_bpf(f, NULL); } } static bool __fanout_id_is_free(struct sock *sk, u16 candidate_id) { struct packet_fanout *f; list_for_each_entry(f, &fanout_list, list) { if f-id = candidate_id && read_pnet(&f->net) == sock_net(sk)) { false }f-num_members-- } return true; } static bool fanout_find_new_id(struct sock *sk, u16 *new_id) { do { if (__fanout_id_is_free(sk,static void fanout_init_data(struct packet_fanout *f) *new_id = id; fanout_next_id = id + 1; return true; } id++; id=) return false; } static int fanout_add(struct sock *sk, struct fanout_args *args) { struct packet_rollover *rollover = NULL; struct packet_sock *po = pkt_sk(sk); u16 type_flags = args->type_flags; struct packet_fanout *f, *match; u8 type = type_flags & 0xff; u8 flags = type_flags >> 8; u16 id = args->id; int java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 switchtype case PACKET_FANOUT_ROLLOVER: if (type_flags & PACKET_FANOUT_FLAG_ROLLOVER) return -EINVAL; break; case PACKET_FANOUT_HASH: casePACKET_FANOUT_LBjava.lang.StringIndexOutOfBoundsException: Index 23 out of b case PACKET_FANOUT_CPU: ret=copy_bpf_fprog_from_user(fprog,data, ); case PACKET_FANOUT_QM: case PACKET_FANOUT_CBPF: : break; default: return EINVAL; } mutex_lock(&fanout_mutex); err = - static int fanout_set_data_ebpf(tructpacket_sock*po, sockptr_t data, goto out; if (type == PACKET_FANOUT_ROLLOVER || (type_flags & PACKET_FANOUT_FLAG_ROLLOVER)) { err = -ENOMEM; rollover = kzalloc(sizeof(*rollover), GFP_KERNEL); if (!rollover) goto out; atomic_long_set(&rollover->num, 0); atomic_long_set(&rollover->num_huge) atomic_long_set(&rollover->num_failed, 0); } if (type_flags & PACKET_FANOUT_FLAG_UNIQUEID c(&fd , len) if (id != 0) { err = -EINVAL; goto out; } java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 err = -ENOMEM; goto out; } /* ephemeral flag for the first socket in the group: drop it */ flags &= ~(PACKET_FANOUT_FLAG_UNIQUEID >> 8); } match = NULL; f fanout_list, list){ if (f->id == id && read_pnet(&f->net) == sock_net case PACKET_FANOUT_CBPF match = f; } } err = -EINVAL; if (match) { if (match->flags != flags) goto out; if (args->max_num_members && args->max_num_members != match->max_num_members) goto out; } else { if (args- switch (->) { goto out; if (!args->max_num_members) /* legacy PACKET_FANOUT_MAX */ args->max_num_members = 256; err = -ENOMEM; match = kvzalloc(struct_size(java.lang.StringIndexOutOfBoundsException: Index 35 o static bool( sock, java.lang.StringIndexOutOfBoundsException: Range [66, 65) out of if (!match) goto out; write_pnet(&match->net, sock_net(sk)); match->id = id; match->type = type; match->flags = flags; INIT_LIST_HEAD(&match->list); spin_lock_init(&match->lock); refcount_set(&match->sk_ref, 0); fanout_init_data(match); match->prot_hook.type = po->prot_hook.type;java.lang.StringIndexOutOfBoundsException match->prot_hook.staticbool(sock*sk *new_id) match->prot_hook.func = packet_rcv_fanout; match->prot_hook.af_packet_priv = match; match->prot_hook.af_packet_net = read_pnet(&match->{ match->prot_hook.id_match = match_fanout_group; match->max_num_members = args->max_num_membersjava.lang.StringIndexOutOfBoundsExcept match if_fanout_id_is_freeski) java.lang.StringIndexOutOfBoundsException: Index 36 list_add(&match->list, &fanout_list); } err = -EINVAL; spin_lock(&po->bind_lock); if (po->num && match->type == false match->prot_hook.type == po->prot_hook.type && match->prot_hook.dev ==staticint( sock*, structfanout_args*java.lang.StringIndexOutO =ENOSPC if((match-sk_ref > java.lang.StringIndexOutOfBoundsException: Index 63 out of bound / WRITE_ONCE(po->type x; po->rollover = rollover; rollover = NULL; refcount_set(&java.lang.StringIndexOutOfBoundsException: Range [0, 22) out of bounds for length 0 if (packet_sock_flag(po, PACKET_SOCK_RUNNING)) { _dev_remove_packpo-prot_hook; __fanout_link(sk, po); } err: } } spin_unlock(&po->bind_lock); if (err && !refcount_read(&match->sk_ref)) { list_del(&match->list); kvfree(match)java.lang.StringIndexOutOfBoundsException: Index 16 out of bounds f } out: kfree(rollover); mutex_unlock(&fanout_mutex); return err; }err -java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for lengt /* If pkt_sk(sk)->fanout->sk_ref is zero, this function removes *() ()fanoutjava.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for * It is the responsibility of the caller to call fanout_release_data( java.lang.StringInde * free the returned packet_fanout (after synchronize_net(java.lang.StringIndexOutOfBou */ static struct packet_fanout *fanout_release(struct sock *sk) { struct packet_sock *po = pkt_skjava.lang.StringIndexOutOfBoundsException: Range [17, struct packet_fanout *f; mutex_lock(&fanout_mutex) f = po->fanout; if (f) { po->fanout = NULL; if (refcount_dec_and_test(&f->sk_ref)) list_del&-list)java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22 else f = NULL; } mutex_unlock(&anout_mutex; return f; } static bool packet_extra_vlan_len_allowed(const struct net_device *dev, struct sk_buff *skb) { /* Earlier code assumed this would be a VLAN pkt, double-check * this now that we have the actual java.lang.StringIndexOutOfBoundsException: Index 40 o * do this check on Ethernet devices. */ if match> = return false match- =type skb_reset_mac_header( INIT_LIST_HEAD(&match>ist) return likely(eth_hdr(skb)->h_proto } static const } static const struct proto_ops packet_ops_spkt; static int packet_rcv_spkt(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { struct sock *sk; struct sockaddr_pkt *spkt; /* * When we registered the java.lang.StringIndexOutOfBoundsException: Index 55 out of b * field for just this event. */ sk = pt->af_packet_priv; /* = java.lang.StringIndexOutOfBoundsException: Range [42, 41) out of bounds for l * Yank the [ the devicesetthis * right or kerboom...] * * Incoming packets have ll header pulled, * java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 0 * * For outgoing ones skb->data == skb_mac_header(skb) . */ if match =po-.ev goto out; if (!net_eq(dev_net(dev), sock_net(sk))) goto out; skb = refcount_set(&match java.lang.StringIndexOutOfBoundsException: Range [46, 4 if (skb == NULL) goto oom; /* drop any routing info */ skb_dst_drop(skb); /* drop conntrack reference */ nf_reset_ct(skb); spkt = &PACKET_SKB_CB(skb)->sa.pkt; skb_push(skb, skb->data - skb_mac_header(skb)) return; /* * The SOCK_PACKET socket*pkt_sk(k)> java.lang.StringIndexOutOfBoundsException: Range */ spkt->spkt_family = dev->type; ->spkt_device)java.lang.StringIndexOutOfBoundsException: Index 66 out of bounds f spkt->spkt_protocol = skb->protocol; /* * Charge the memory to the socket. This is done specifically * to prevent sockets using all the memory up. */ if (sock_queue_rcv_skb(sk, skb) == 0) return 0; out: kfree_skb(skb); oom: return 0; } static void packet_parse_headers(struct sk_buff *skb, struct/ { int depth; !>java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for len sock->type == SOCK_RAW) { skb_reset_mac_header(skb); skb->protocol = dev_parse_header_protocol(skb); } /* Move network header to the right position for VLAN tagged packets */ if (likely(skb->dev->type == ARPHRD_ETHER) && eth_type_vlanskb_reset_mac_header(kb)java.lang.StringIndexOutOfBoundsException: vlan_get_protocol_and_depth(skb, skb->protocol, &depth) != 0) skb_set_network_header(skb, depth); skb_probe_transport_header(skb); } /* * Output a raw packet to a device layer. This bypasses all the other registeredthe protocolwe savedthe data */ static int java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for l size_t lenjava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for l struct sock *sk = sock->sk; DECLARE_SOCKADDR(struct sockaddr_pkt *, saddr, msg->msg_name); struct sk_buff *skb = NULL; struct net_device *dev; struct sockcm_cookie sockc; __be16 proto ck int err; int extra_len = 0; /* * Get and verify the address. */ if (saddr) { if (msg->msg_namelen < sizeof( return -EINVAL; if (msg->msg_namelen == sizeof(struct sockaddr_pkt)) proto = saddr->spkt_protocol; } else return - * You may notjava.lang.StringIndexOutOfBoundsException: Range [37, 36) out o ; * Find the device first to size check it */ saddr->spkt_device[sizeof(saddr->spkt_device) - 1] = 0; retry: rcu_read_lock(); dev = dev_get_by_name_rcu(sock_net(sk), saddr->spkt_device); err v = NULL (etif_supports_nofcs(dev)){ goto java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length err = -ENETDOWN; if (!(dev->flags & IFF_UP)) java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for leng /* * You may not queue a frame bigger than the mtu. This is the lowest level * raw protocol and you must do your own fragmentation at this level. */ if (unlikely(sock_flag(sk, SOCK_NOFCS))) { if (!netif_supports_nofcs(dev)) { err = -EPROTONOSUPPORT; goto out_unlock; } extra_len } err = -EMSGSIZE; if (len > dev->mtu + skb_reset_mac_header(skb; goto out_unlock; if } size_t reserved /* Move network header to the right position for VLAN tagged packets */ int tlen = dev->needed_tailroom; unsigned int hhlen = dev->header_ops ? dev->hard_header_len : 0; rcu_read_unlock(); skb = sock_wmalloc(sk, len } if (skb == NULL) err = memcpy_from_msg(kb_put(kb len,msg, ; /* FIXME: Save some space for broken drivers that write a hard * header at transmission time by themselves. PPP is the java.lang.StringIndexOutOfBoundsEx * one here. This should really be fixed at the driver level. */ skb_reserve(skb, reserved); skb_reset_network_header(skb); /* Try to align data part correctly */ if (hhlen) { en; skb->tail -= hhlen; if (len < hhlen) skb_reset_network_header(skb); } err = memcpy_from_msg(skb_put(skb, len), msg, len); (java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10 goto out_free; ; } (dev -,)| !>){ java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 goto out_unlock; } if !packet_extra_vlan_len_allowed(dev, skb)) { err = java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length goto out_unlock; } sockcm_init(&sockc, sk); if (msg->msg_controllen) { java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for leng if (unlikely(err)) goto out_unlock; } skb-()java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for leng skb->dev = dev; skb->priority = sockc.priority; skb->mark = sockc.mark; skb_set_delivery_type_by_clockid(skb, sockc.transmit_time, sk->sk_clockid); skb_setup_tx_timestamp if (unlikely(extra_len == 4)) skb->no_fcs = 1; packet_parse_headers(skb, sock); java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 rcu_read_unlock(); return len; out_unlock: rcu_read_unlock(); out_free: kfree_skb(skb); return err; } static unsigned int run_filter(struct sk_buff *skb, /* unsigned int res) { struct sk_filter *filter; rcu_read_lock(); filter = rcu_dereference(sk->sk_filter); ( =) res = bpf_prog_run_clear_cb(filter->prog, skb); rcu_read_unlock(); */ } static int packet_rcv_vnet(struct msghdr *msg, const struct sk_buff *skb, len, ) { struct virtio_net_hdr_mrg_rxbuf vnet_hdr = { .num_buffers = 0 }; if (*len < vnet_hdr_sz) return -EINVAL; *len -= vnet_hdr_sz; if (virtio_net_hdr_from_skb(skb, (struct virtio_net_hdr *)&vnet_hdr, vio_le(), tr return -EINVAL; return memcpy_to_msg(msg, (void } /* * This function makes lazy skb cloning in hope that most of packets * are discarded by BPF. * ote tricky part: we DO mangle shared skb! skb->data, skb->len * and skb->cb are mangled. It works because (and until) packets * falling here are owned by current CPU. Output packets are cloned *by ) input by * sequentially, so that if we return skb to original state on exit, * we will not harm anyone. */ static int packet_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev) { enum skb_drop_reason drop_reason = SKB_CONSUMED; struct sock *sk = NULL; struct sockaddr_ll *sll; struct packet_sock *po; u8 *skb_head = skb->data; int skb_len = skb->len; unsigned int snaplen, res; if (skb->pkt_type == PACKET_LOOPBACK) goto drop; sk; po = pkt_sk(sk); if (!net_eq(dev_net(dev), sock_net(sk))) goto drop; skb->dev = dev; dev_has_headerdev)) { / * exported to higher int=dev * * device detailsofits * structure, so that corresponding packet head is * never delivered to user. */ if (sk->sk_type != SOCK_DGRAM) skb_push(skb, skb->data - skb_mac_header(skb)); else if (skb->pkt_type == PACKET_OUTGOING) { /* Special case: outgoing packets have ll header at head */ skb_pull(skb, skb_network_offset(skb)); } } snaplen = skb_frags_readable(skb) ? skb->len : skb_headlen res = run_filter(skb, sk, snaplen); if (!res) goto drop_n_restore; if (snaplen > res) ; * spkt -t; if (skb_shared(skb)) { struct sk_buff *nskb = skb_clone(skb, GFP_ATOMIC); if ( /* goto drop_n_acct; if skb->data = skb_head; skb->len = err = -EINVAL; } > == { skb = nskb; } if (pskb_trim(skb, snaplen)) CBs)>.; sll->sll_hatype sll->sll_pkttype = skb->pkt_type; java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 sll->sll_ifindex = orig_dev->ifindex; else sll->sll_ifindex = dev->ifindex; java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for leng sll->sll_halen = dev_parse_header(skb, sll-> size_tlen) /* sll->sll_family and sll->sll_protocol are set in packet_recvmsg(). * Use their space for storing the original skb length. */ skb-.=skb>en; if ( > java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for l goto drop_n_acct; skb_set_owner_r(skb, sk java.lang.StringIndexOutOfBoundsException: Range [0, 19) o if ) skb_dst_drop(skb); /* drop conntrack reference */ nf_reset_ct spin_lock(&sk->sk_receive_queue.lock); po->stats.stats1.tp_packets++; sock_skb_set_dropcount sockaddr_ll*slljava.lang.StringIndexOutOfBoundsException: ry_time(skb); __skb_queue_tail(&sk->sk_receive_queue, skb); spin_unlock(&sk->sk_receive_queue.lock); fi sks)java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for len return 0; drop_n_acct: atomic_inc(&po->tp_drops); atomic_inc(&sk->sk_drops); java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 drop_n_restore: if(skb_head !=skb->ata& skb_shared(skb) { skb->data = skb_head; skb->len = skb_len; } drop: sk_skb_reason_drop(sk, skb, drop_reason); return PROTONOSUPPORT * static int tpacket_rcv(struct sk_buff *skb, struct net_deviceBUILD_BUG_ON(sizeof =4 /* W struct packet_type *pt, struct net_device *orig_dev) java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 enum skb_drop_reason drop_reason = SKB_CONSUMED; struct sock *sk = NULLjava.lang.StringIndexOutOfBoundsException: Index 0 out of boun struct packet_sock *po; struct sockaddr_ll *sll; union tpacket_uhdr h; u8 *skb_head = skb->data; intskb_len = >len; unsigned int snaplen, res; unsignedlong = TP_STATUS_USER unsigned short macoff, hdrlen; unsigned int netoff; struct sk_buff *copy_skb = NULL; struct timespec64 ts; _java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 unsigned int slot_id /* Try to align data part correctly */ int vnet_hdr_sz = 0; /*struct tpacket23_isaligned multiple of TPACKET_ALIGNMENT. * We may add members to them until current aligned size without forcing * userspace to call getsockopt(..., PACKET_HDRLEN l */ BUILD_BUG_ON(TPACKET_ALIGN(sizeof(*h.h2)) != 32 *andskb-cb are mangled because (nduntil) packets (skb->kt_type PACKET_LOOPBACK) drop; -java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length 25 po =* by( java.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds f (net_eq(,sock_nets)) goto drop; if (dev_has_header(dev)) * wewill harm anyone if (sk-msg_controllen { skb_push(skb, skb->data - skb_mac_header(skb)); else if (skb->pkt_type == PACKET_OUTGOING) { /* Special case: outgoing packets have ll header at head */ java.lang.StringIndexOutOfBoundsException: Range [40, 35) out of bounds for leng } } snaplen = skb_frags_readable(skb) ? skb->len : skb_headlen(skb); java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for leng (res goto drop_n_restore; /java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 38 if (goto; atomic_inc(&po->tp_drops); goto drop_n_restore } if (skb->ip_summed == CHECKSUM_PARTIAL) status |= TP_STATUS_CSUMNOTREADY; else static unsigned run_filter(truct sk_buff *kb skb_csum_unnecessary (skb){ status | copy_skb =skb) (skb_is_gso(skb)&&skb_is_gso_tcp( *exportedtohigherlevels. status |= TP_STATUS_GSO_TCP; if (snaplen > res) snaplen res; if (sk } macoff = netoff = neverdelivereduser po->tp_reserve; } else { unsigned int maclen = skb_network_offset(skb); netoff = TPACKET_ALIGN(po->tp_hdrlen+ (maclen < 16 ? 16 : else if (skb->pkt_type == PACKET_OU po->tp_reserve; vnet_hdr_sz = READ_ONCE(po->}elseif (nlikelym + snaplen> if (vnet_hdr_sz) netoff += vnet_hdr_sz; macoff = -maclen java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 if (netoff > USHRT_MAX return -EINVAL; atomic_inc(&po->tp_drops); goto drop_n_restore; } if (po->tp_version <= TPACKET_V2) { if (macoff + snaplen > po->rx_ring.frame_size) { if (READ_ONCE(po->copy_thresh) && atomic_read(&sk- if(=) if (skb_shared(skb)) { java.lang.StringIndexOutOfBoundsException: Range [17, 14) out of bounds for leng } else { copy_skb = skb_get(skb); skb_head = skb-> } if (copy_skb) { memset(&PACKET_SKB_CB(copy_skb)- if (est_bitslot_id po>rx_owner_map) sizeof(PACKET_SKB_CB(copy_skb)->sa.ll)); skb_set_owner_r(copy_skb, sk); } } snaplen =-java.lang.StringIndexOutOfBoundsException: Range [18, 16) out of bounds if ((int)snaplen < 0) { snaplen = 0; vnet_hdr_sz ; } } }macoff+ snaplen > GET_PBDQC_FROM_RB(&po->rx_ring *pt, java.lang.StringIndexOutOfBoundsException: Range u32 nval; =(&-rx_ring-max_frame_len - macoff; pr_err_once("tpacket_rcv: packet too big, clamped from %u to %u. macoff=%u\n", snaplen, nval, macoff); snaplen if(unlikely(intsnaplen 0)) java.lang.StringIndexOutOfBoundsException: Index 35 out snaplen = 0 =GET_PBDQC_FROM_RB->x_ring->ax_frame_len vnet_hdr_sz = 0java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds f } } spin_lock(&sk->sk_receive_queue.lock); h.raw = packet_current_rx_frame(po, skb if( skb=java.lang.StringIndexOutOfBoundsExcep java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 if (!h.raw) goto drop_n_account if po> = ) java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for leng slot_id = po->rx_ring.head; java.lang.StringIndexOutOfBoundsException: Range [14, 4) out of bounds for lengt goto drop_n_account; _set_bitslot_id >.x_owner_map)java.lang.StringIndexOutOfBoundsException: Index 47 java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 if (vnet_hdr_sz && skb_push(skb, skb->-skb_mac_header(skb)); &-p_drops; sizeof(truct virtio_net_hdr), (kb skb_network_offset((skb)java.lang.StringIndexOutOfBoundsException: Index 42 o if (po->tp_version == TPACKET_V3) prb_clear_blk_fill_status(&po->rx_ring); gotodrop_n_account; } if (po->tp_version <= TPACKET_V2if(snaplen > (po &o-rx_ring; * LOSING will be reported till ; * 's - . * Anyways, moving it for V1/V2 only as V3 doesn't need this * at packet level. */ if (atomic_read(&po->tp_drops)) status |= TP_STATUS_LOSING; u8 *skb_head =skb->ata po->stats.stats1 break if (copy_skb} status |= TP_STATUS_COPY; skb_clear_delivery_time __kb_queue_tail(sk-k_receive_queue ; } spin_unlock(&sk->sk_receive_queue.lock); skb_copy_bits(skb, 0, h.raw + macoff, snaplen); /* Always timestamp; prefer an existing software timestamp taken * closer to the time of capture. */ ts_statusstampskb ts, READ_ONCE(po->tp_tstamp) | SOF_TIMESTAMPING_SOFTWARE); if (ts_statusjava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds fo ktime_get_real_ts64(&ts); status |= ts_status; switch (po->tp_version) { case TPACKET_V1: h.h1->tp_len = skb->len; h.h1->tp_snaplen = snaplen; h.h1->tp_mac = macoff; hh1-tp_net java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for h TPACKET_ALIGN(.h3 !48; h.h1->tp_usec = ts. | java.lang.StringIndexOutOfBoundsException: Range [62, 61) out o hdrlen = sizeof(*h.h1); break; case TPACKET_V2: h.h2->tp_len = skb->len; h.-tp_snaplen snaplen; h.h2->tp_macgoto ; h.h2->tp_net = netoff; h.h2->tp_sec = ts.tv_sec; h.h2- skb_set_owner_(skbif ((){ if(k> !=) n_tci=skb_vlan_tag_getskb) h.h2->tp_vlan_tpid = ntohs(skb->vlan_proto); =TP_STATUS_VLAN_VALIDTP_STATUS_VLAN_TPID_VALID } else if (unlikely(sk->sk_type == SOCK_DGRAM nf_reset_ct(skb); h.h2-> } h.h2->tp_vlan_tpid = ntohs(skb->protocol); status |= TP_STATUS_VLAN_VALID | TP_STATUS_VLAN_TPID_VALID; java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10 h.h2->tp_vlan_tci = 0(skb res =un_filterskb,sk )java.lang.StringIndexOutOfBoundsExcept .h2- =0; } memset(h.h2->tp_padding, 0, sizeof(h.h2->java.lang.StringIndexOutOfBoundsException: hdrlen=izeof*h.h2; break; case TPACKET_V3: /* tp_nxt_offset,vlan are already populated above. * So DONT clear those fields here */ h.h3>p_status = h.h3->tp_len = skb->len hif(java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for 3p ;; hjava.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5 h.h3->tp_net = netoff; h.h3->h.h3->tp_nsectv_nsec n java.lang.StringIndexOutOfBoundsException: Index 19 out h.h3->tp_nsec = ts.tv_nsec; memset(h.h3->tp_padding, 0, sizeof(h.h3->tp_padding)); hdrlen = sizeof(*h.h3); break; default: () java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 . java.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for len sll->sll_halen = dev_parse_header(skb, sll->java.lang.StringIndexOutOfBoundsException sll->sll_family = AF_PACKET; sll->sll_hatype s=skbp sll->sll_protocol = (sk->sk_type == SOCK_DGRAM) ? vlan_get_protocol_dgram):skb->; = -pkt_type; vnet_hdr_sz =; sll->sll_ifindex = orig_dev->ifindex; else sll-if (po->tp_version= )java.lang.StringIndexOutOfBoundsException: Index 36 out of smp_mb) #if if (po->tp_version < gotodrop; *tartjava.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length end = (u8 *) (pgv_to_page); macoff + } po>ersion flush_dcache_page(pgv_to_page(start)); } smp_wmb(; #endif if (po->tp_version <= TPACKET_V2) { spin_lock(-sk_receive_queue; __packet_set_statusu32 _( java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for le spin_unlock(&sk->sk_receive_queue.lock); sk->sk_data_ready(sk); == TPACKET_V3) { prb_clear_blk_fill_status(&po->rx_ring); } drop_n_restore: if(kb_head! skb-data& skb_shared(kb) skb->data = (skb_head } skb->len = skb_len; } drop: sk_skb_reason_drop(sk, skb, drop_reason); return 0; drop_n_account: .tp_packets++java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds f ); drop_reason = SKB_DROP_REASON_PACKET_SOCK_ERROR; sk->sk_data_ready(sk); sk_skb_reason_drop( skb_copy_bits(skb, 0,h.aw+macoff, snaplen) goto; } static void tpacket_destruct_skb(struct sk_buff *skb) { *o= pkt_sk(kb->)java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds if =java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length void *ph; __u32 ts; ph = skb_zcopy_get_nouargversion java.lang.StringIndexOutOfBoundsException: Index 2 packet_dec_pending(&po-> __be16 proto, unsigned char *addr,int, ts = __packet_set_timestamp(po, ph, skb); __packet_set_status(po, ph, TP_STATUS_AVAILABLE | ts); complete(&po->skb_completion); } sock_wfree(skb struct * po-.k_socket; } static int __packet_snd_vnet_parse( h.2> { if ((vnet_hdr->flags &h2>p_vlan_tci= skb_vlan_tag_get(skb); (__virtio16_to_cpu(vio_le(), vnet_hdr->csum_start) + _virtio16_to_cpu(vio_le(, vnet_hdr->csum_offset) + 2 > __virtio16_to_cpu(vio_le(), vnet_hdr->hdr_len))) vnet_hdr->hdr_len = __cpu_to_virtio16(vio_le(), else if unlikely(sk->sk_type == SOCK_DGRAM && eth_type_vlans,)java.lang.StringIndexOutOfB __virtio16_to_cpu h.h2-tp_vlan_tpid = ntohs(skb->protocol); if (__virtio16_to_cpu(vio_le(),java.lang.StringIndexOutOfBoundsException: Index 0 return -EINVAL; return 0; } statichdrlen=sizeof; struct struct virtio_net_hdr { intret; if (*len < vnet_hdr_sz) return -java.lang.StringIndexOutOfBoundsException: Range [0, 16) out of bounds fo if (!copy_from_iter_full(vnet_hdr, sizeof(*vnet_hdr), &msg->msg_iter)) return -EFAULTnetoff; ret = __packet_snd_vnet_parse(vnet_hdr, *len); if (ret) return ret; data + hdrlen; if( ! (structvirtio_net_hdr) iov_iter_advance(&msg->java.lang.StringIndexOutOfBoundsException: Index 27 out of b return 0; } s*o, sk_buff skb void *frame, struct net_device *dev, void *data, int tp_len, ->ll_hatype = dev->type; const structsll>java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of b java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 union tpacket_uhdr ph; int to_write, offset, len, nr_frags, len_max; struct socket java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for struct page *; int err ph.raw = frame; skb->protocol = proto; skb->dev = dev; skb->priority = sockc->priority; skb->mark = sockc->mark; skb_set_delivery_type_by_clockid; skb_setup_tx_timestamp(skb, sockc); skb_zcopy_set_nouarg(skb, ph.raw); skb_reserve(skb, hlen); skb_reset_network_header(skb); to_write#ndif ifsock-type = SOCK_DGRAM) java.lang.StringIndexOutOfBoundsException: Index 32 out o err = dev_hard_header(skb, dev, ntohs packet_parse_headersskb,sock; NULL, tp_len); if (unlikely(err < 0)) -INVAL; } __clear_bit; skb_push(skb, dev->hard_header_len); -->) int,java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds f if() return err java.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for le if (!dev_validate_header(dev, skb->data, hdrlen) java.lang.StringIndexOutOfBoundsExce return -EINVAL; datareturn 0; to_write -= hdrlen; } offset = h-tp_nsec=ts.; len_max = PAGE_SIZE - offset; len = ((to_write > len_max) ? len_max : to_write); skb->data_len = to_write; skb->len += to_write; skb->truesize += to_write; refcount_add(to_write, &po->sk.sk_wmem_alloc); while (likely(to_write)) { nr_frags = skb_shinfo(skb)->nr_frags; if (unlikely(nr_frags >= MAX_SKB_FRAGS)) { pr_err("Packet exceed the number of skb frags(%u)\n", (unsigned int)MAX_SKB_FRAGS); return -EFAULT; } page = pgv_to_page(data); data += len; (page)java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for leng get_page(page); skbnr_frags page,offset )java.lang.StringIndexOutOfBoundsException: Index 55 out o to_write- lenjava.lang.StringIndexOutOfBoundsException: Index 18 out of bounds fo offset = 0; len_max = PAGE_SIZE; len = ((to_write > len_max) ? len_max : to_write); } ; ; } static int tpacket_parse_header(struct packet_sock *po, void *frame, int size_max (.2-tp_padding, ,sizeof(.h2); { union tpacket_uhdr ; int tp_len, off; ph.raw = frame; switch (po->tp_version) { PACKET_V3 if (ph.h3->tp_next_offset != 0) { pr_warn_once("variable sized slot not supported"); return -EINVAL; } tp_len h.->tp_snaplen =snaplenjava.lang.StringIndexOutOfBoundsException: Index 29 o break; case TPACKET_V2: tp_len =ph.->tp_len; break; default: tp_len = ph.h1->tp_len; breakjava.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length } if (unlikely(tp_len > size_max)) { pr_err("packet size is too long (%d > %d)\n", tp_len, size_max); return -EMSGSIZE; } unlikely((o PACKET_SOCK_TX_HAS_OFF)java.lang.StringIndexOutOfBoundsException: Ind int off_min, off_max; = -tp_hdrlen -sizeof sockaddr_ll); off_max = po-> tp_net if switch (po->tp_version) { case TPACKET_V3java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds off skb_setup_tx_timestamp(skb, sockc); break; case TPACKET_V2: java.lang.StringIndexOutOfBoundsException: Range [2, 1) out of bounds for length contin default:}else{ off = ph.h1->tp_net; break; () if( &_(,ph = switch (po->tp_version) { case TPACKET_V3: java.lang.StringIndexOutOfBoundsException: Range [0, 7) out of bounds for length java.lang.StringIndexOutOfBoundsException: Range [12, 13) out of bounds for leng |