net: dsa: lantiq: Allow special tags only on CPU port
authorHauke Mehrtens <hauke@hauke-m.de>
Sun, 5 May 2019 22:25:06 +0000 (00:25 +0200)
committerDavid S. Miller <davem@davemloft.net>
Tue, 7 May 2019 17:34:44 +0000 (10:34 -0700)
Allow the special tag in ingress only on the CPU port and not on all
ports. A packet with a special tag could circumvent the hardware
forwarding and should only be allowed on the CPU port where Linux
controls the port.

Fixes: 14fceff4771e ("net: dsa: Add Lantiq / Intel DSA driver for vrx200)"
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Reviewed-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/dsa/lantiq_gswip.c

index d8328866908c0cd8861bcfa9a4ad05e2e1f416b8..0a2259cb09df740a94509e08bebc35c4f9d8b26c 100644 (file)
@@ -461,8 +461,6 @@ static int gswip_port_enable(struct dsa_switch *ds, int port,
                         GSWIP_FDMA_PCTRLp(port));
        gswip_switch_mask(priv, 0, GSWIP_SDMA_PCTRL_EN,
                          GSWIP_SDMA_PCTRLp(port));
-       gswip_switch_mask(priv, 0, GSWIP_PCE_PCTRL_0_INGRESS,
-                         GSWIP_PCE_PCTRL_0p(port));
 
        if (!dsa_is_cpu_port(ds, port)) {
                u32 macconf = GSWIP_MDIO_PHY_LINK_AUTO |
@@ -578,6 +576,10 @@ static int gswip_setup(struct dsa_switch *ds)
        gswip_switch_mask(priv, 0, GSWIP_FDMA_PCTRL_STEN,
                          GSWIP_FDMA_PCTRLp(cpu_port));
 
+       /* accept special tag in ingress direction */
+       gswip_switch_mask(priv, 0, GSWIP_PCE_PCTRL_0_INGRESS,
+                         GSWIP_PCE_PCTRL_0p(cpu_port));
+
        gswip_switch_mask(priv, 0, GSWIP_MAC_CTRL_2_MLEN,
                          GSWIP_MAC_CTRL_2p(cpu_port));
        gswip_switch_w(priv, VLAN_ETH_FRAME_LEN + 8, GSWIP_MAC_FLEN);