Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Subject: Re: [PATCH v2] ipvs:set sock send/receive buffer correctly
To:     Julian Anastasov <ja@ssi.bg>
CC:     <wensong@linux-vs.org>, <horms@verge.net.au>,
        <pablo@netfilter.org>, <kadlec@blackhole.kfki.hu>, <fw@strlen.de>,
        <davem@davemloft.net>, <netdev@vger.kernel.org>,
        <lvs-devel@vger.kernel.org>, <netfilter-devel@vger.kernel.org>,
        <coreteam@netfilter.org>, <linux-kernel@vger.kernel.org>,
        <eric.dumazet@gmail.com>, Mingfangsen <mingfangsen@huawei.com>,
        <liujie165@huawei.com>
References: <7d0dbb46-09aa-0163-bfd9-169594489584@huawei.com>
 <alpine.LFD.2.21.1904212142540.2345@ja.home.ssi.bg>
From:   linmiaohe <linmiaohe@huawei.com>
Message-ID: <a4a786c0-85f5-a134-bcd0-ace8edf7762a@huawei.com>
Date:   Sun, 28 Apr 2019 11:03:54 +0800
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:60.0) Gecko/20100101
 Thunderbird/60.5.1
MIME-Version: 1.0
In-Reply-To: <alpine.LFD.2.21.1904212142540.2345@ja.home.ssi.bg>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk


On 2019/4/22 2:48, Julian Anastasov wrote:
> 
> 	Hello,
> 
> On Thu, 18 Apr 2019, linmiaohe wrote:
> 
>> From: Jie Liu <liujie165@huawei.com>
>>
>> If we set sysctl_wmem_max or sysctl_rmem_max larger than INT_MAX, the
>> send/receive buffer of sock will be an negative value. Same as when
>> the val is larger than INT_MAX/2.
>>
>> Fixes: 1c003b1580e2 ("ipvs: wakeup master thread")
>> Reported-by: Qiang Ning <ningqiang1@huawei.com>
>> Reviewed-by: Miaohe Lin <linmiaohe@huawei.com>
>> Signed-off-by: Jie Liu <liujie165@huawei.com>
> 
> 	Looks good to me, thanks!
> 
> Acked-by: Julian Anastasov <ja@ssi.bg>
> 
>> ---
>>  net/netfilter/ipvs/ip_vs_sync.c | 20 ++++++++++++++------
>>  1 file changed, 14 insertions(+), 6 deletions(-)
>>
>> diff --git a/net/netfilter/ipvs/ip_vs_sync.c b/net/netfilter/ipvs/ip_vs_sync.c
>> index 2526be6b3d90..760f3364d4a2 100644
>> --- a/net/netfilter/ipvs/ip_vs_sync.c
>> +++ b/net/netfilter/ipvs/ip_vs_sync.c
>> @@ -1278,14 +1278,22 @@ static void set_sock_size(struct sock *sk, int mode, int val)
>>  	/* setsockopt(sock, SOL_SOCKET, SO_RCVBUF, &val, sizeof(val)); */
>>  	lock_sock(sk);
>>  	if (mode) {
>> -		val = clamp_t(int, val, (SOCK_MIN_SNDBUF + 1) / 2,
>> -			      sysctl_wmem_max);
>> -		sk->sk_sndbuf = val * 2;
>> +		val = min_t(u32, val, sysctl_wmem_max);
>> +
>> +		/* Ensure val * 2 fits into an int, to prevent max_t()
>> +		 * from treating it as a negative value.
>> +		 */
>> +		val = min_t(int, val, INT_MAX / 2);
>> +		sk->sk_sndbuf = max_t(int, val * 2, SOCK_MIN_SNDBUF);
>>  		sk->sk_userlocks |= SOCK_SNDBUF_LOCK;
>>  	} else {
>> -		val = clamp_t(int, val, (SOCK_MIN_RCVBUF + 1) / 2,
>> -			      sysctl_rmem_max);
>> -		sk->sk_rcvbuf = val * 2;
>> +		val = min_t(u32, val, sysctl_rmem_max);
>> +
>> +		/* Ensure val * 2 fits into an int, to prevent max_t()
>> +		 * from treating it as a negative value.
>> +		 */
>> +		val = min_t(int, val, INT_MAX / 2);
>> +		sk->sk_rcvbuf = max_t(int, val * 2, SOCK_MIN_RCVBUF);
>>  		sk->sk_userlocks |= SOCK_RCVBUF_LOCK;
>>  	}
>>  	release_sock(sk);
>> -- 
> 
> Regards
> 
> --
> Julian Anastasov <ja@ssi.bg>
> 
> .
> 

Hi all,
    Could you please tell me if there is still any problem?
Many thanks.