On Thu, 21 Jan 2021 18:01:28 +0200 Vladimir Oltean wrote:
> +/* Since the dsa/tagging sysfs device attribute is per master, the assumption
> + * is that all DSA switches within a tree share the same tagger, otherwise
> + * they would have formed disjoint trees (different "dsa,member" values).
> + */
> +int dsa_tree_change_tag_proto(struct dsa_switch_tree *dst,
> +                           struct net_device *master,
> +                           const struct dsa_device_ops *tag_ops,
> +                           const struct dsa_device_ops *old_tag_ops)
> +{
> +     struct dsa_notifier_tag_proto_info info;
> +     struct dsa_port *dp;
> +     int err;
> +
> +     /* At the moment we don't allow changing the tag protocol under
> +      * traffic. May revisit in the future.
> +      */
> +     if (master->flags & IFF_UP)
> +             return -EBUSY;

But you're not holding rtnl_lock at this point, this check is advisory
at best.

> +     list_for_each_entry(dp, &dst->ports, list) {

What protects this iteration? All sysfs guarantees you is that  
struct net_device *master itself will not disappear.

Could you explain the locking expectations a bit?

> +             if (!dsa_is_user_port(dp->ds, dp->index))
> +                     continue;
> +
> +             if (dp->slave->flags & IFF_UP)
> +                     return -EBUSY;
> +     }
> +
> +     mutex_lock(&dst->tagger_lock);
> +
> +     info.tag_ops = old_tag_ops;
> +     err = dsa_tree_notify(dst, DSA_NOTIFIER_TAG_PROTO_DEL, &info);
> +     if (err)
> +             return err;
> +
> +     info.tag_ops = tag_ops;
> +     err = dsa_tree_notify(dst, DSA_NOTIFIER_TAG_PROTO_SET, &info);
> +     if (err)
> +             goto out_unwind_tagger;
> +
> +     mutex_unlock(&dst->tagger_lock);
> +
> +     return 0;
> +
> +out_unwind_tagger:
> +     info.tag_ops = old_tag_ops;
> +     dsa_tree_notify(dst, DSA_NOTIFIER_TAG_PROTO_SET, &info);
> +     mutex_unlock(&dst->tagger_lock);
> +     return err;
> +}

Reply via email to