{"push_id":2508729239,"size":16,"distinct_size":16,"ref":"refs/heads/master","head":"9553e6e408883b3677e208dc66049bcd7f758529","before":"e1d26e429a5cb0153767a5d73a0e2440b9eed2b1","commits":[{"sha":"d1a83cd8dc50cc69119f815941db456db1fa8ef1","author":{"name":"Thomas Monjalon","email":"5f50a84c1fa3bcff146405017f36aec1a10a9e38@monjalon.net"},"message":"maintainers: fix typo and ordering\n\nFix logical/alphabetical ordering, spacing, and syntax typo.\n\nFixes: 8fb3b2576025 (\"maintainers: call out subtree committers\")\n\nSigned-off-by: Thomas Monjalon <thomas@monjalon.net>\nAcked-by: Pablo de Lara <pablo.de.lara.guarch@intel.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/d1a83cd8dc50cc69119f815941db456db1fa8ef1"},{"sha":"f00dcb7b0a74928b8b846f73b37386d7b1bb4869","author":{"name":"Thomas Monjalon","email":"5f50a84c1fa3bcff146405017f36aec1a10a9e38@monjalon.net"},"message":"mbuf: fix Tx checksum offload API doc\n\nWhen introducing rte_eth_tx_prepare(), the constraints on checksum\npre-filling for Tx offloads were relaxed because implemented in\nthe PMDs with rte_net_intel_cksum_flags_prepare() helper.\nAs a consequence, these old requirements are removed for:\n\t- PKT_TX_OUTER_IP_CKSUM\n\t- PKT_TX_IP_CKSUM\n\t- PKT_TX_[L4]_CKSUM\n\t- PKT_TX_TCP_SEG\n\nNot sure SCTP offload is properly implemented though.\n\nA reference to rte_eth_tx_prepare() is added in rte_eth_tx_burst() doc.\n\nFixes: 609dd68ef14f (\"mbuf: enhance the API documentation of offload flags\")\nFixes: 4fb7e803eb1a (\"ethdev: add Tx preparation\")\nCc: stable@dpdk.org\n\nSigned-off-by: Thomas Monjalon <thomas@monjalon.net>\nAcked-by: Olivier Matz <olivier.matz@6wind.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/f00dcb7b0a74928b8b846f73b37386d7b1bb4869"},{"sha":"ab66fe0e4a1ca058c4e23efd475e48788c0977e7","author":{"name":"Thomas Monjalon","email":"5f50a84c1fa3bcff146405017f36aec1a10a9e38@monjalon.net"},"message":"mbuf: improve tunnel Tx offloads API doc\n\nAdd few details to remind TSO flag, checksum flags and header lengths.\n\nThe doxygen syntax for MPLS-in-UDP is fixed.\n\nFixes: d95188551fa1 (\"mbuf: introduce new Tx offload flag for MPLS-in-UDP\")\nCc: stable@dpdk.org\n\nSigned-off-by: Thomas Monjalon <thomas@monjalon.net>\nAcked-by: Olivier Matz <olivier.matz@6wind.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/ab66fe0e4a1ca058c4e23efd475e48788c0977e7"},{"sha":"91c6de7eb7ac19afbaa8c97f9bc66427b1022347","author":{"name":"Thomas Monjalon","email":"5f50a84c1fa3bcff146405017f36aec1a10a9e38@monjalon.net"},"message":"eal/linux: use strlcpy in uevent parsing\n\nSupport of strlcpy has recently been added to DPDK.\n\nThis replacement has been generated by the coccinelle script:\n\tdevtools/cocci.sh devtools/cocci/strlcpy.cocci\n\nFixes: 0d0f478d0483 (\"eal/linux: add uevent parse and process\")\n\nSigned-off-by: Thomas Monjalon <thomas@monjalon.net>\nAcked-by: Bruce Richardson <bruce.richardson@intel.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/91c6de7eb7ac19afbaa8c97f9bc66427b1022347"},{"sha":"c6ae7de0defc1ac4c9036a6a3395eb196422bbf7","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: fix indirect descriptors table translation size\n\nThis patch fixes the size passed at the indirect descriptor\ntable translation time, which is the len field of the descriptor,\nand not a single descriptor.\n\nThis issue has been assigned CVE-2018-1059.\n\nFixes: 62fdb8255ae7 (\"vhost: use the guest IOVA to host VA helper\")\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/c6ae7de0defc1ac4c9036a6a3395eb196422bbf7"},{"sha":"070aceda33ac820ce78e1552ddf6e2b0d7d127eb","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: check all range is mapped when translating GPAs\n\nThere is currently no check done on the length when translating\nguest addresses into host virtual addresses. Also, there is no\nguanrantee that the guest addresses range is contiguous in\nthe host virtual address space.\n\nThis patch prepares vhost_iova_to_vva() and its callers to\nreturn and check the mapped size. If the mapped size is smaller\nthan the requested size, the caller handle it as an error.\n\nThis issue has been assigned CVE-2018-1059.\n\nReported-by: Yongji Xie <xieyongji@baidu.com>\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/070aceda33ac820ce78e1552ddf6e2b0d7d127eb"},{"sha":"41333fba5b98945b8051e7b48f8fe47432cdd356","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: introduce safe API for GPA translation\n\nThis new rte_vhost_va_from_guest_pa API takes an extra len\nparameter, used to specify the size of the range to be mapped.\nEffective mapped range is returned via len parameter.\n\nThis issue has been assigned CVE-2018-1059.\n\nReported-by: Yongji Xie <xieyongji@baidu.com>\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/41333fba5b98945b8051e7b48f8fe47432cdd356"},{"sha":"30920b1e2b157328f991ac595e20dbebc31bbb89","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: ensure all range is mapped when translating QVAs\n\nThis patch ensures that all the address range is mapped when\ntranslating addresses from master's addresses (e.g. QEMU host\naddressess) to process VAs.\n\nThis issue has been assigned CVE-2018-1059.\n\nReported-by: Yongji Xie <xieyongji@baidu.com>\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/30920b1e2b157328f991ac595e20dbebc31bbb89"},{"sha":"d0c24508e1f7173612dc9ebc5b36f417284568d7","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: add support for non-contiguous indirect descs tables\n\nThis patch adds support for non-contiguous indirect descriptor\ntables in VA space.\n\nWhen it happens, which is unlikely, a table is allocated and the\nnon-contiguous content is copied into it.\n\nThis issue has been assigned CVE-2018-1059.\n\nReported-by: Yongji Xie <xieyongji@baidu.com>\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/d0c24508e1f7173612dc9ebc5b36f417284568d7"},{"sha":"91b7b40806b6ea9910d6686fddcf7c970771fa72","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: handle virtually non-contiguous buffers in Tx\n\nThis patch enables the handling of buffers non-contiguous in\nprocess virtual address space in the dequeue path.\n\nWhen virtio-net header doesn't fit in a single chunck, it is\ncopied into a local variablei before being processed.\n\nFor packet content, the copy length is limited to the chunck\nsize, next chuncks VAs being fetched afterward.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/91b7b40806b6ea9910d6686fddcf7c970771fa72"},{"sha":"6727f5a739b6f26689e5189a74d37afdb926c0ac","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: handle virtually non-contiguous buffers in Rx\n\nThis patch enables the handling of buffers non-contiguous in\nprocess virtual address space in the enqueue path when mergeable\nbuffers aren't used.\n\nWhen virtio-net header doesn't fit in a single chunck, it is\ncomputed in a local variable and copied to the buffer chuncks\nafterwards.\n\nFor packet content, the copy length is limited to the chunck\nsize, next chuncks VAs being fetched afterward.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/6727f5a739b6f26689e5189a74d37afdb926c0ac"},{"sha":"fb3815cc614dc754a96e5933165a2ded66b87164","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: handle virtually non-contiguous buffers in Rx-mrg\n\nThis patch enables the handling of buffers non-contiguous in\nprocess virtual address space in the enqueue path when mergeable\nbuffers are used.\n\nWhen virtio-net header doesn't fit in a single chunck, it is\ncomputed in a local variable and copied to the buffer chuncks\nafterwards.\n\nFor packet content, the copy length is limited to the chunck\nsize, next chuncks VAs being fetched afterward.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/fb3815cc614dc754a96e5933165a2ded66b87164"},{"sha":"82c93a567d3b987f9a93909e2087432450680a63","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"examples/vhost: move to safe GPA translation API\n\nThis patch uses the new rte_vhost_va_from_guest_pa() API\nto ensure the application doesn't perform out-of-bound\naccesses either because of a malicious guest providing an\nincorrect descriptor length, or because the buffer is\ncontiguous in guest physical address space but not in the\nhost process virtual address space.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/82c93a567d3b987f9a93909e2087432450680a63"},{"sha":"a3258d299378e33609409b36aebd987bc15033ea","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"examples/vhost_scsi: move to safe GPA translation API\n\nThis patch uses the new rte_vhost_va_from_guest_pa() API\nto ensure all the descriptor buffer is mapped contiguously\nin the application virtual address space.\n\nAs the application did not checked return of previous API,\nthis patch just print an error if the buffer address isn't in\nthe vhost memory regions or if it is scattered. Ideally, it\nshould handle scattered buffers gracefully.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/a3258d299378e33609409b36aebd987bc15033ea"},{"sha":"0aee2428419f37d8f85e64e0d73311843b19676e","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost/crypto: move to safe GPA translation API\n\nThis patch uses the new rte_vhost_va_from_guest_pa() API\nto ensure all the descriptor buffer is mapped contiguously\nin the application virtual address space.\n\nIt does not handle buffers discontiguous in host virtual\naddress space, but only return an error.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/0aee2428419f37d8f85e64e0d73311843b19676e"},{"sha":"9553e6e408883b3677e208dc66049bcd7f758529","author":{"name":"Maxime Coquelin","email":"9a2667dee3b90866bbc9c2696cff2b7d5616c95a@redhat.com"},"message":"vhost: deprecate unsafe GPA translation API\n\nThis patch marks rte_vhost_gpa_to_vva() as deprecated because\nit is unsafe. Application relying on this API should move\nto the new rte_vhost_va_from_guest_pa() API, and check\nreturned length to avoid out-of-bound accesses.\n\nThis issue has been assigned CVE-2018-1059.\n\nSigned-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>","distinct":true,"url":"https://api.github.com/repos/gkatsikas/dpdk/commits/9553e6e408883b3677e208dc66049bcd7f758529"}]}
{"actor":{"display_login":"gkatsikas"}}