Compare commits
9 Commits
| Author | SHA256 | Date | |
|---|---|---|---|
| 4c485462ff | |||
| c22189e94f | |||
|
82ff4e904a | ||
|
784fe585de | ||
|
|
02a1f951af | ||
| 450b426d20 | |||
| 8c23f8b4f3 | |||
| 0bda8618f9 | |||
| b6c1153b84 |
BIN
dpdk-23.11.1.tar.xz
(Stored with Git LFS)
BIN
dpdk-23.11.1.tar.xz
(Stored with Git LFS)
Binary file not shown.
3
dpdk-24.11.tar.xz
Normal file
3
dpdk-24.11.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:0b1abc1fda430192ac7eb2ac9f8d83f268a32cd1bb7995b1d6ee8009c67f8f8f
|
||||
size 17410740
|
||||
35
dpdk-CVE-2024-11614.patch
Normal file
35
dpdk-CVE-2024-11614.patch
Normal file
@ -0,0 +1,35 @@
|
||||
From fdf13ea6fede07538fbe5e2a46fa6d4b2368fa81 Mon Sep 17 00:00:00 2001
|
||||
From: Olivier Matz <olivier.matz@6wind.com>
|
||||
Date: Thu, 28 Nov 2024 12:09:56 +0100
|
||||
Subject: net/virtio: fix Rx checksum calculation
|
||||
|
||||
If hdr->csum_start is larger than packet length, the len argument passed
|
||||
to rte_raw_cksum_mbuf() overflows and causes a segmentation fault.
|
||||
|
||||
Ignore checksum computation in this case.
|
||||
|
||||
CVE-2024-11614
|
||||
|
||||
Fixes: ca7036b4af3a ("vhost: fix offload flags in Rx path")
|
||||
|
||||
Signed-off-by: Maxime Gouin <maxime.gouin@6wind.com>
|
||||
Signed-off-by: Olivier Matz <olivier.matz@6wind.com>
|
||||
Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>
|
||||
---
|
||||
lib/vhost/virtio_net.c | 3 +++
|
||||
1 file changed, 3 insertions(+)
|
||||
|
||||
diff --git a/lib/vhost/virtio_net.c b/lib/vhost/virtio_net.c
|
||||
index d764d4bc6a..69901ab3b5 100644
|
||||
--- a/lib/vhost/virtio_net.c
|
||||
+++ b/lib/vhost/virtio_net.c
|
||||
@@ -2823,6 +2823,9 @@ vhost_dequeue_offload(struct virtio_net *dev, struct virtio_net_hdr *hdr,
|
||||
*/
|
||||
uint16_t csum = 0, off;
|
||||
|
||||
+ if (hdr->csum_start >= rte_pktmbuf_pkt_len(m))
|
||||
+ return;
|
||||
+
|
||||
if (rte_raw_cksum_mbuf(m, hdr->csum_start,
|
||||
rte_pktmbuf_pkt_len(m) - hdr->csum_start, &csum) < 0)
|
||||
return;
|
||||
70
dpdk.changes
70
dpdk.changes
@ -1,3 +1,29 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Feb 17 07:38:12 UTC 2025 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
||||
|
||||
- Update to LTS version 24.11
|
||||
* Changelog: https://doc.dpdk.org/guides/rel_notes/release_24_11.html
|
||||
* This update fix build with glibc 2.41
|
||||
- Use gcc14 on x86_64 SLE15/16 to avoid the inline error
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 1 13:12:20 UTC 2025 - Duraisankar P <Duraisankar.pitchumani@suse.com>
|
||||
|
||||
- Fix CVE-2024-11614 [bsc#1234718] - Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
|
||||
- Added patch,
|
||||
+ dpdk-CVE-2024-11614.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 14 12:34:14 UTC 2024 - Dan Partelly <d.partelly@yahoo.com>
|
||||
|
||||
- Enable (disabled by default) installation of headers needed
|
||||
to build drivers.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 13 05:08:15 UTC 2024 - Duraisankar P <Duraisankar.pitchumani@suse.com>
|
||||
|
||||
- Use python macros from build config
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 5 11:40:32 UTC 2024 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
||||
|
||||
@ -279,9 +305,9 @@ Mon Sep 2 06:15:32 UTC 2024 - Duraisankar P <Duraisankar.pitchumani@suse.com>
|
||||
* 0002-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
* kni-fix-build-with-Linux-6.10.patch
|
||||
* kni-fix-build-with-Linux-6.8.patch
|
||||
* preamble
|
||||
* preamble
|
||||
- Updated the below patch for DPDK v23.11
|
||||
* 0001-fix-cpu-compatibility.patch
|
||||
* 0001-fix-cpu-compatibility.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 22 17:33:47 UTC 2024 - Aeneas Jaißle <aj@ajaissle.de>
|
||||
@ -409,7 +435,7 @@ Wed Apr 5 21:10:54 UTC 2023 - Duraisankar P <Duraisankar.pitchumani@suse.com>
|
||||
* Added Patches:
|
||||
0001-fix-cpu-compatibility.patch
|
||||
* Rebased patches:
|
||||
0002-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
0002-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 22 08:58:07 UTC 2023 - Bernhard Wiedemann <bwiedemann@suse.com>
|
||||
@ -420,7 +446,7 @@ Wed Feb 22 08:58:07 UTC 2023 - Bernhard Wiedemann <bwiedemann@suse.com>
|
||||
Tue Jun 21 13:20:00 UTC 2022 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- also strip meson generated runpaths when installing examples
|
||||
manually (bsc#1200620)
|
||||
manually (bsc#1200620)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed May 25 10:13:44 UTC 2022 - Jiri Slaby <jslaby@suse.cz>
|
||||
@ -673,7 +699,7 @@ Mon Oct 25 13:41:49 UTC 2021 - Stefan Weiberg <sweiberg@suse.com>
|
||||
0001-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
to
|
||||
0002-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
- rename
|
||||
- rename
|
||||
dpdk-fallthrough-comment-fixes.patch
|
||||
to
|
||||
0003-dpdk-fallthrough-comment-fixes.patch
|
||||
@ -748,7 +774,7 @@ Tue Sep 22 08:13:23 UTC 2020 - Jaime Caamaño Ruiz <jcaamano@suse.com>
|
||||
|
||||
- Update to 19.11.4. For a list of fixes check:
|
||||
https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
|
||||
- Add patch to resolve build error reported in Staging:E project
|
||||
- Add patch to resolve build error reported in Staging:E project
|
||||
where a kernel backport (jsc#SLE-13536) introduced backward
|
||||
incompatible changes to the API that break kni module build
|
||||
* 0001-SLE15-SP3-compatibility-patch-for-kni.patch
|
||||
@ -1164,7 +1190,7 @@ Tue May 19 11:41:34 UTC 2020 - Jaime Caamaño Ruiz <jcaamano@suse.com>
|
||||
Wed Apr 29 11:45:24 UTC 2020 - Jaime Caamaño Ruiz <jcaamano@suse.com>
|
||||
|
||||
- Update to v19.11.1. For a list of changes, check:
|
||||
* https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
|
||||
* https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
|
||||
- Removed patches no longer applying to the code base:
|
||||
* 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
|
||||
* 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
|
||||
@ -1194,7 +1220,7 @@ Tue Nov 19 15:45:29 UTC 2019 - Jaime Caamaño Ruiz <jcaamano@suse.com>
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 30 10:04:59 UTC 2019 - <jcaamano@suse.com>
|
||||
|
||||
- Changed to multibuild (bsc#1151455).
|
||||
- Changed to multibuild (bsc#1151455).
|
||||
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
|
||||
recent kernels (bsc#1144704).
|
||||
|
||||
@ -1504,11 +1530,11 @@ Mon Sep 4 11:18:19 CEST 2017 - ndas@suse.de
|
||||
http://dpdk.org/doc/guides/rel_notes/release_17_08.html
|
||||
http://dpdk.org/doc/guides/rel_notes/release_17_05.html
|
||||
http://dpdk.org/doc/guides/rel_notes/release_17_02.html
|
||||
[-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
|
||||
-0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
|
||||
-0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
|
||||
-0005-kni-fix-build-with-gcc-7.1.patch
|
||||
-0006-kni-fix-ethtool-build-with-kernel-4.11.patch
|
||||
[-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
|
||||
-0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
|
||||
-0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
|
||||
-0005-kni-fix-build-with-gcc-7.1.patch
|
||||
-0006-kni-fix-ethtool-build-with-kernel-4.11.patch
|
||||
-0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
|
||||
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
|
||||
[+ 0002-kni-fix-build-on-SLE12-SP3.patch]
|
||||
@ -1578,7 +1604,7 @@ Wed Jun 14 12:55:10 CEST 2017 - ndas@suse.de
|
||||
* net/ixgbe: fix Rx queue blocking issue
|
||||
* net/ixgbe: fix all queues drop setting of DCB
|
||||
* net/ixgbe: fix TC bandwidth setting
|
||||
more details can be found in
|
||||
more details can be found in
|
||||
http://dpdk.org/ml/archives/stable/2017-May/001809.html
|
||||
[- 0005-kni-fix-build-with-kernel-4.11.patch]
|
||||
- use default gcc which is now gcc7 (bsc#1042372)
|
||||
@ -1738,7 +1764,7 @@ Fri Feb 24 13:46:44 CET 2017 - ndas@suse.de
|
||||
Thu Feb 16 18:29:43 CET 2017 - ndas@suse.de
|
||||
|
||||
- Do not disable cryptodev as EXPREMENTAL tag has been removed.
|
||||
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
|
||||
- Remove CONFIG_RTE_LIBRTE_MBUF_OFFLOAD as cryptodev is not depending
|
||||
on it anymore and its removed from the upstream.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
@ -1962,9 +1988,9 @@ Thu Jul 28 16:39:07 CEST 2016 - ndas@suse.de
|
||||
-------------------------------------------------------------------
|
||||
Mon Jul 11 18:20:57 CEST 2016 - ndas@suse.de
|
||||
|
||||
- Added support for aarch64 compilation.
|
||||
- Added support for aarch64 compilation.
|
||||
[+0035-PAGE_SIZE-constant-is-not-defined-on-ARM-since-multi.patch]
|
||||
- Disabled aarch64 dpdk-examples package for the time being as it
|
||||
- Disabled aarch64 dpdk-examples package for the time being as it
|
||||
contains lots of Intel specific code.
|
||||
- Added proper "Group" field for the subpackages .
|
||||
|
||||
@ -1984,7 +2010,7 @@ Thu Jun 23 09:56:05 UTC 2016 - mchandras@suse.de
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 14 10:04:09 UTC 2016 - ndas@suse.de
|
||||
|
||||
- Removed unwanted files(bsc#984437).
|
||||
- Removed unwanted files(bsc#984437).
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 9 17:18:01 CEST 2016 - ndas@suse.de
|
||||
@ -1999,7 +2025,7 @@ Wed Jun 1 14:16:10 UTC 2016 - mchandras@suse.de
|
||||
-------------------------------------------------------------------
|
||||
Fri May 27 12:28:02 CEST 2016 - ndas@suse.de
|
||||
|
||||
- Applied all the fixes recommended by upstream for
|
||||
- Applied all the fixes recommended by upstream for
|
||||
v2.2 stable release(bsc#981996).
|
||||
|
||||
[+0008-app-testpmd-handle-SIGINT-and-SIGTERM.patch,
|
||||
@ -2050,7 +2076,7 @@ Wed Apr 27 14:55:37 UTC 2016 - mchandras@suse.de
|
||||
-------------------------------------------------------------------
|
||||
Tue Apr 19 10:45:29 CEST 2016 - ndas@suse.de
|
||||
|
||||
- DPDK is most common vhost-user backend, Adding upstream patches to
|
||||
- DPDK is most common vhost-user backend, Adding upstream patches to
|
||||
help qemu vm live migration with vhost-user (fate#320713).
|
||||
[+ 0004-54f9e32-vhost-handle-dirty-pages-logging-request.patch
|
||||
+ 0005-d293dac-vhost-claim-support-of-guest-announce.patch
|
||||
@ -2087,11 +2113,11 @@ Mon Apr 11 16:12:09 CEST 2016 - ndas@suse.de
|
||||
- dpdk-2.2-warningflags.patch,
|
||||
+ 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch
|
||||
+ 0002-examples-ip_pipeline-fix-implicit-declaration-of-fun.patch]
|
||||
- Added CONFIG_RTE_BUILD_COMBINE_LIBS flags to club all all *.so into
|
||||
- Added CONFIG_RTE_BUILD_COMBINE_LIBS flags to club all all *.so into
|
||||
one library
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 21 14:15:08 UTC 2016 - nirmoy.das@suse.com
|
||||
|
||||
- Intial version 2.2.0(fate#319169)
|
||||
- Intial version 2.2.0(fate#319169)
|
||||
|
||||
|
||||
35
dpdk.spec
35
dpdk.spec
@ -1,7 +1,7 @@
|
||||
#
|
||||
# spec file for package dpdk
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
# Copyright (c) 2025 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@ -35,17 +35,24 @@
|
||||
%endif
|
||||
# This is in sync with <src>/ABI_VERSION
|
||||
# TODO: automate this sync
|
||||
%define maj 24
|
||||
%define maj 25
|
||||
%define min 0
|
||||
#%%define lname libdpdk-%%{maj}_%%{min}
|
||||
%define lname libdpdk-%{maj}
|
||||
#
|
||||
%if 0%{?sle_version} >= 150600
|
||||
%global pprefix python311
|
||||
%{?sle15_python_module_pythons}
|
||||
%else
|
||||
%global pythons python3
|
||||
%global pprefix python3
|
||||
%endif
|
||||
# Add option to build without examples
|
||||
%bcond_without examples
|
||||
# Add option to build without tools
|
||||
%bcond_without tools
|
||||
#
|
||||
Name: dpdk%{name_tag}
|
||||
Version: 23.11.1
|
||||
Version: 24.11
|
||||
Release: 0
|
||||
Summary: Set of libraries and drivers for fast packet processing
|
||||
License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only
|
||||
@ -56,6 +63,17 @@ Source: https://fast.dpdk.org/rel/dpdk-%{version}.tar.xz
|
||||
Patch0: 0001-fix-cpu-compatibility.patch
|
||||
# PATCH-FIX-UPSTREAM - https://bugs.dpdk.org/show_bug.cgi?id=1530
|
||||
Patch1: 0001-examples-vm_power_manager-add-missing-header.patch
|
||||
# PATCH-FIX-UPSTREAM - CVE-2024-11614 [bsc#1234718], net/virtio: Fix Denial Of Service from malicious guest on hypervisors using DPDK Vhost library
|
||||
Patch2: dpdk-CVE-2024-11614.patch
|
||||
%ifarch x86_64
|
||||
%if 0%{suse_version} < 1699
|
||||
# Workaround for build failure related to inline error
|
||||
BuildRequires: gcc14
|
||||
%endif
|
||||
%endif
|
||||
BuildRequires: %{python_module Sphinx}
|
||||
BuildRequires: %{python_module pyelftools >= 0.22}
|
||||
BuildRequires: %{pythons}
|
||||
BuildRequires: binutils
|
||||
BuildRequires: doxygen
|
||||
BuildRequires: fdupes
|
||||
@ -66,9 +84,6 @@ BuildRequires: modutils
|
||||
BuildRequires: patchelf
|
||||
BuildRequires: pesign-obs-integration
|
||||
BuildRequires: pkgconfig
|
||||
BuildRequires: python3
|
||||
BuildRequires: python3-Sphinx
|
||||
BuildRequires: python3-pyelftools >= 0.22
|
||||
BuildRequires: rdma-core-devel
|
||||
BuildRequires: pkgconfig(jansson)
|
||||
BuildRequires: pkgconfig(libcrypto)
|
||||
@ -165,7 +180,7 @@ as L2 and L3 forwarding.
|
||||
|
||||
%prep
|
||||
# can't use %%{name} because of dpdk-thunderx
|
||||
%setup -n dpdk-stable-%{version}
|
||||
%setup -q -n dpdk-%{version}
|
||||
%if 0%{?suse_version} > 1600
|
||||
%autopatch -p1
|
||||
%else
|
||||
@ -184,6 +199,9 @@ sed -i "/performance-thread/d" examples/meson.build
|
||||
|
||||
%ifarch x86_64
|
||||
export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -msse4"
|
||||
%if 0%{suse_version} < 1699
|
||||
export CC=gcc-14
|
||||
%endif
|
||||
%endif
|
||||
examples="all"
|
||||
for flavor in %{flavors_to_build}; do
|
||||
@ -197,6 +215,7 @@ for flavor in %{flavors_to_build}; do
|
||||
-Dplatform="%{platform}" \
|
||||
-Dcpu_instruction_set=%{machine} \
|
||||
-Denable_kmods=true \
|
||||
-Denable_driver_sdk=true \
|
||||
-Ddrivers_install_subdir=%{pmddir} \
|
||||
-Dkernel_dir="%{_prefix}/src/linux-obj/%{_target_cpu}/$flavor"
|
||||
%meson_build
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user