Re: [PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-19 Thread Daniel Borkmann
On 11/10/2018 10:47 PM, David Miller wrote: > From: Michał Mirosław > Date: Sat, 10 Nov 2018 19:58:29 +0100 > >> Fix BPF code/JITs to allow for separate VLAN_PRESENT flag >> storage and finally move the flag to separate storage in skbuff. >> >> This is final step to make CLAN.CFI transparent to

Re: [PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-16 Thread David Miller
From: Alexei Starovoitov Date: Fri, 16 Nov 2018 19:51:55 -0800 > Michal, could you please explain the reasoning? By treating VLAN.CFI specially as "VLAN TAG PRESENT" we prevent the usage of certain VLAN ID encodings. So he's trying to get rid of VLAN_TAG_PRESENT completely and this was the

Re: [PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-16 Thread Alexei Starovoitov
On Sat, Nov 10, 2018 at 1:48 PM David Miller wrote: > > From: Michał Mirosław > Date: Sat, 10 Nov 2018 19:58:29 +0100 > > > Fix BPF code/JITs to allow for separate VLAN_PRESENT flag > > storage and finally move the flag to separate storage in skbuff. > > > > This is final step to make CLAN.CFI

Re: [PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-16 Thread David Miller
From: Michał Mirosław Date: Sat, 10 Nov 2018 19:58:29 +0100 > Fix BPF code/JITs to allow for separate VLAN_PRESENT flag > storage and finally move the flag to separate storage in skbuff. > > This is final step to make CLAN.CFI transparent to core Linux > networking stack. > > An #ifdef is

Re: [PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-10 Thread David Miller
From: Michał Mirosław Date: Sat, 10 Nov 2018 19:58:29 +0100 > Fix BPF code/JITs to allow for separate VLAN_PRESENT flag > storage and finally move the flag to separate storage in skbuff. > > This is final step to make CLAN.CFI transparent to core Linux > networking stack. > > An #ifdef is

[PATCH net-next 0/6] Remove VLAN.CFI overload

2018-11-10 Thread Michał Mirosław
Fix BPF code/JITs to allow for separate VLAN_PRESENT flag storage and finally move the flag to separate storage in skbuff. This is final step to make CLAN.CFI transparent to core Linux networking stack. An #ifdef is introduced temporarily to mark fragments masking VLAN_TAG_PRESENT. This is