An out-of-bounds read vulnerability was found in DPDK's Vhost
library checksum offload feature. This issue enables an
untrusted or compromised guest to crash the hypervisor's vSwitch
by forging Virtio descriptors to cause out-of-bounds reads. This
flaw allows an attacker with a malicious VM using a virtio driver
to cause the vhost-user side to crash by sending a packet with a
Tx checksum offload request and an invalid csum_start offset.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-11614https://security-tracker.debian.org/tracker/CVE-2024-11614
Upstream-patch:
https://git.dpdk.org/dpdk/commit/?id=4dc4e33ffa108e945fc8a1e2bbc7819791faa61e
Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The problem with shared library is that generated object files are also
required additionally by libxdp. So build the static library instead of
installing .o files as well (which would need us to disable stripping
etc.)
Error log while building libxdp:
| libxdp: Couldn't find a BPF file with name xsk_def_xdp_prog.o
| xsk_configure(): Failed to create xsk socket
Enable production option too. Also see:
https://github.com/xdp-project/xdp-tools/issues/180
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The project sets libdir path to /usr/lib [1] which is not always
correct and results in failures when $libdir, as an example, is
/usr/lib64. Set the correct value of LIBDIR.
[1] https://github.com/xdp-project/xdp-tools/blob/v1.2/lib/defines.mk#L11
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
xdp-tools - Library and utilities for use with XDP.
It also provides libxdp library.
https://github.com/xdp-project/xdp-tools
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
These are fixed in 21.11.1 but the CPE data in NVD is incomplete.
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
This is fixed in 21.11.1 but the CPE data in NVD is incomplete.
Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Backport a patch from main branch to fix illegal instruction
issue on CPU which has no AVX instructions.
Reference:
https://bugs.dpdk.org/show_bug.cgi?id=1038
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The netif_rx_ni is removed in below commit after kernel upgraded
to 5.18, so use netif_rx() instead of netif_rx_ni() to fix the gap.
2655926aea9b net: Remove netif_rx_any_context() and netif_rx_ni().
Fixes:
| TOPDIR/tmp-glibc/work/intel_x86_64-wrs-linux/dpdk-module/21.11.0-r0/git/kernel/linux/kni/kni_net.c: In function 'kni_net_rx_normal':
| TOPDIR/tmp-glibc/work/intel_x86_64-wrs-linux/dpdk-module/21.11.0-r0/git/kernel/linux/kni/kni_net.c:444:17: error: implicit declaration of function 'netif_rx_ni'; did you mean 'netif_rx'? [-Werror=implicit-function-declaration]
444 | netif_rx_ni(skb);
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
In oe-core commit ceda3238cdbf ("meta/meta-selftest/meta-skeleton: Update
LICENSE variable to use SPDX license identifiers"), all LICENSE variables
were updated to only use SPDX license identifiers.
Fix the following warnings:
WARNING: dpdk-21.11.0-r0 do_package_qa: QA Issue: Recipe LICENSE
includes obsolete licenses LGPLv2.1 GPLv2 [obsolete-license]
WARNING: dpdk-kmods-1.0-r0 do_package_qa: QA Issue: Recipe LICENSE
includes obsolete licenses GPL-2 [obsolete-license]
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
dpdk-module can now be built against qemux86 and etc. that do not support it
at all. To avoid confusing the users with compile-time errors, let's align it
with dpdk.
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The packaging rules are too restrictive and lead to errors when a binary
is generated that is not currently captured by the rules. Use += so it
at least is packaged and doesn't cause errors.
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
dpdk 21.11 support already has been added. So time to drop it.
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
random_ether_addr() is finally removed in kernel commit ba530fea8ca1
("ethernet: remove random_ether_addr()"). Backport commit e6cbfd9bf30b
("kni: update kernel API to set random MAC address") from dpdk repo
to use eth_random_addr() instead.
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
The generated pkg-config libdpdk.pc file has the output
with full path of librt such as
<builddir>/recipe-sysroot/usr/lib/librt.so
instead of -lrt.
This will cause an issue when compile DPDK app
with static library as the librt is not found with the
hardcode path in the libdpdk.pc file.
Signed-off-by: Mohamad Noor Alim Hussin <mohamad.noor.alim.hussin@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Fixes:
| In function 'memset',
| inlined from 'test_table_stub' at test_table_tables.c:151:4:
| /buildarea/tmp/work/intel_x86_64-wrs-linux/dpdk/19.11.5-r0/recipe-sysroot/usr/include/bits/string_fortified.h:59:10: error: '__builtin_memset' offset [0, 31] is out of the bounds [0, 0] [-Werror=array-bounds]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
AF_XDP driver depend of libbpf. Enable it so that AF_XDP
driver can be compiled.
Signed-off-by: Mohamad Noor Alim Hussin <mohamad.noor.alim.hussin@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Since commit 681a67288655 ("usertools: check if module is loaded
before binding") in dpdk, usertools/dpdk-devbind.py only checks
dynamic kernel drivers in /sys/module. So built-in kernel driver
cannot be bound.
Add "usertools-devbind-fix-binding-for-built-in-kernel-dr.patch" to
fix this issue.
Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
