net: skbuff: Limit skb_vlan_pop/push() to expect skb->data at mac header

[cascardo/linux.git] / net / core / skbuff.c

diff --git a/net/core/skbuff.c b/net/core/skbuff.c
index d36c754..cbd19d2 100644 (file)
--- a/net/core/skbuff.c
+++ b/net/core/skbuff.c
@@ -4528,13 +4528,18 @@ EXPORT_SYMBOL(skb_ensure_writable);
 int __skb_vlan_pop(struct sk_buff *skb, u16 *vlan_tci)
 {
        struct vlan_hdr *vhdr;
-       unsigned int offset = skb->data - skb_mac_header(skb);
+       int offset = skb->data - skb_mac_header(skb);
        int err;
 
-       __skb_push(skb, offset);
+       if (WARN_ONCE(offset,
+                     "__skb_vlan_pop got skb with skb->data not at mac header (offset %d)\n",
+                     offset)) {
+               return -EINVAL;
+       }
+
        err = skb_ensure_writable(skb, VLAN_ETH_HLEN);
        if (unlikely(err))
-               goto pull;
+               return err;
 
        skb_postpull_rcsum(skb, skb->data + (2 * ETH_ALEN), VLAN_HLEN);
 
@@ -4551,13 +4556,14 @@ int __skb_vlan_pop(struct sk_buff *skb, u16 *vlan_tci)
                skb_set_network_header(skb, ETH_HLEN);
 
        skb_reset_mac_len(skb);
-pull:
-       __skb_pull(skb, offset);
 
        return err;
 }
 EXPORT_SYMBOL(__skb_vlan_pop);
 
+/* Pop a vlan tag either from hwaccel or from payload.
+ * Expects skb->data at mac header.
+ */
 int skb_vlan_pop(struct sk_buff *skb)
 {
        u16 vlan_tci;
@@ -4588,29 +4594,30 @@ int skb_vlan_pop(struct sk_buff *skb)
 }
 EXPORT_SYMBOL(skb_vlan_pop);
 
+/* Push a vlan tag either into hwaccel or into payload (if hwaccel tag present).
+ * Expects skb->data at mac header.
+ */
 int skb_vlan_push(struct sk_buff *skb, __be16 vlan_proto, u16 vlan_tci)
 {
        if (skb_vlan_tag_present(skb)) {
-               unsigned int offset = skb->data - skb_mac_header(skb);
+               int offset = skb->data - skb_mac_header(skb);
                int err;
 
-               /* __vlan_insert_tag expect skb->data pointing to mac header.
-                * So change skb->data before calling it and change back to
-                * original position later
-                */
-               __skb_push(skb, offset);
+               if (WARN_ONCE(offset,
+                             "skb_vlan_push got skb with skb->data not at mac header (offset %d)\n",
+                             offset)) {
+                       return -EINVAL;
+               }
+
                err = __vlan_insert_tag(skb, skb->vlan_proto,
                                        skb_vlan_tag_get(skb));
-               if (err) {
-                       __skb_pull(skb, offset);
+               if (err)
                        return err;
-               }
 
                skb->protocol = skb->vlan_proto;
                skb->mac_len += VLAN_HLEN;
 
                skb_postpush_rcsum(skb, skb->data + (2 * ETH_ALEN), VLAN_HLEN);
-               __skb_pull(skb, offset);
        }
        __vlan_hwaccel_put_tag(skb, vlan_proto, vlan_tci);
        return 0;