diff options
| author | Ahmed Zaki <ahmed.zaki@intel.com> | 2024-06-14 07:18:42 -0600 |
|---|---|---|
| committer | Tony Nguyen <anthony.l.nguyen@intel.com> | 2024-07-23 15:26:41 -0700 |
| commit | 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 (patch) | |
| tree | b2af4165ff72155aea1fcc54717c30a5543f1767 /drivers/net/ethernet/intel/ice/ice_switch.c | |
| parent | 3ba359c0cd6eb5ea772125a7aededb4a2d516684 (diff) | |
ice: Add a per-VF limit on number of FDIR filters
While the iavf driver adds a s/w limit (128) on the number of FDIR
filters that the VF can request, a malicious VF driver can request more
than that and exhaust the resources for other VFs.
Add a similar limit in ice.
CC: stable@vger.kernel.org
Fixes: 1f7ea1cd6a37 ("ice: Enable FDIR Configure for AVF")
Reviewed-by: Przemek Kitszel <przemyslaw.kitszel@intel.com>
Suggested-by: Sridhar Samudrala <sridhar.samudrala@intel.com>
Signed-off-by: Ahmed Zaki <ahmed.zaki@intel.com>
Reviewed-by: Wojciech Drewek <wojciech.drewek@intel.com>
Tested-by: Rafal Romanowski <rafal.romanowski@intel.com>
Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com>
Diffstat (limited to 'drivers/net/ethernet/intel/ice/ice_switch.c')
0 files changed, 0 insertions, 0 deletions