Commit f46c1e16 authored by Dragos Tatulea's avatar Dragos Tatulea Committed by Michael S. Tsirkin
Browse files

vdpa: Enable strict validation for netlinks ops 



The previous patches added the missing nla policies that were required for
validation to work.

Now strict validation on netlink ops can be enabled. This patch does it.

Signed-off-by: default avatarDragos Tatulea <dtatulea@nvidia.com>
Cc: stable@vger.kernel.org
Message-Id: <20230727175757.73988-9-dtatulea@nvidia.com>
Signed-off-by: default avatarMichael S. Tsirkin <mst@redhat.com>
parent 5d6ba607

drivers/vdpa/vdpa.c

+0 −6
Original line number Diff line number Diff line
@@ -1257,37 +1257,31 @@ static const struct nla_policy vdpa_nl_policy[VDPA_ATTR_MAX + 1] = { 
static const struct genl_ops vdpa_nl_ops[] = {

	{

		.cmd = VDPA_CMD_MGMTDEV_GET,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_mgmtdev_get_doit,

		.dumpit = vdpa_nl_cmd_mgmtdev_get_dumpit,

	},

	{

		.cmd = VDPA_CMD_DEV_NEW,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_dev_add_set_doit,

		.flags = GENL_ADMIN_PERM,

	},

	{

		.cmd = VDPA_CMD_DEV_DEL,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_dev_del_set_doit,

		.flags = GENL_ADMIN_PERM,

	},

	{

		.cmd = VDPA_CMD_DEV_GET,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_dev_get_doit,

		.dumpit = vdpa_nl_cmd_dev_get_dumpit,

	},

	{

		.cmd = VDPA_CMD_DEV_CONFIG_GET,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_dev_config_get_doit,

		.dumpit = vdpa_nl_cmd_dev_config_get_dumpit,

	},

	{

		.cmd = VDPA_CMD_DEV_VSTATS_GET,

		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,

		.doit = vdpa_nl_cmd_dev_stats_get_doit,

		.flags = GENL_ADMIN_PERM,

	},