Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754677AbdIGKUC (ORCPT ); Thu, 7 Sep 2017 06:20:02 -0400 Received: from ganesha.gnumonks.org ([213.95.27.120]:52236 "EHLO ganesha.gnumonks.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753905AbdIGKUA (ORCPT ); Thu, 7 Sep 2017 06:20:00 -0400 Date: Thu, 7 Sep 2017 12:19:31 +0200 From: Pablo Neira Ayuso To: Arnd Bergmann Cc: Vishwanath Pai , Jozsef Kadlecsik , Florian Westphal , "David S. Miller" , Josh Hunt , netfilter-devel@vger.kernel.org, coreteam@netfilter.org, Networking , Linux Kernel Mailing List Subject: Re: [PATCH] netfilter: xt_hashlimit: avoid 64-bit division Message-ID: <20170907101931.GB2049@salvia> References: <20170906195825.3715290-1-arnd@arndb.de> <7791dee1-64a9-dcaa-c5d9-0b04a44bc526@akamai.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) X-Spam-Score: -2.9 (--) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 2234 Lines: 55 On Wed, Sep 06, 2017 at 10:48:22PM +0200, Arnd Bergmann wrote: > On Wed, Sep 6, 2017 at 10:22 PM, Vishwanath Pai wrote: > > On 09/06/2017 03:57 PM, Arnd Bergmann wrote: > >> 64-bit division is expensive on 32-bit architectures, and > >> requires a special function call to avoid a link error like: > >> > >> net/netfilter/xt_hashlimit.o: In function `hashlimit_mt_common': > >> xt_hashlimit.c:(.text+0x1328): undefined reference to `__aeabi_uldivmod' > >> > >> In the case of hashlimit_mt_common, we don't actually need a > >> 64-bit operation, we can simply rewrite the function slightly > >> to make that clear to the compiler. > >> > >> Fixes: bea74641e378 ("netfilter: xt_hashlimit: add rate match mode") > >> Signed-off-by: Arnd Bergmann > >> --- > >> net/netfilter/xt_hashlimit.c | 5 ++++- > >> 1 file changed, 4 insertions(+), 1 deletion(-) > >> > >> diff --git a/net/netfilter/xt_hashlimit.c b/net/netfilter/xt_hashlimit.c > >> index 10d48234f5f4..50b53d86eef5 100644 > >> --- a/net/netfilter/xt_hashlimit.c > >> +++ b/net/netfilter/xt_hashlimit.c > >> @@ -531,7 +531,10 @@ static u64 user2rate_bytes(u64 user) > >> { > >> u64 r; > >> > >> - r = user ? 0xFFFFFFFFULL / user : 0xFFFFFFFFULL; > >> + if (user > 0xFFFFFFFFULL) > >> + return 0; > >> + > >> + r = user ? 0xFFFFFFFFULL / (u32)user : 0xFFFFFFFFULL; > >> r = (r - 1) << 4; > >> return r; > >> } > >> > > > > I have submitted another patch to fix this: > > https://patchwork.ozlabs.org/patch/809881/ > > > > We have seen this problem before, I was careful not to introduce this > > again in the new patch but clearly I overlooked this particular line :( > > > > In the other cases we fixed it by replacing division with div64_u64(). > > div64_u64() seems needlessly expensive here since the dividend > is known to be a 32-bit number. I guess the function is not called > frequently though, so it doesn't matter much. This is called from the packet path, only for the first packet for each new destination IP entry in the hashtable, still from the datapath. So if we can take something faster (for 32 bit arches) that is correct, I think it's sensible to take. Let me know in any case.