[PATCH net v3 0/3] tun: fix re-attaching the socket filter

From: Rongguang Wei <redacted>

This is v3 of the series that fixes attaching a queue to a TAP device which
re-installs the socket filter of a persistent device.

Patch 1 keeps a copy of the program in the kernel when it is configured,
instead of reading tun->fprog from user space again on every later attach.
It also adds sk_attach_filter_kern(), the kernel memory counterpart of
sk_attach_filter(), which the patch uses. That is the second issue reported
in the review of v1; IFF_NOFILTER keeps working and is no longer needed as
a workaround.

Patch 2 fixes the inverted error check after the filter attach in
tun_attach(): a successful re-attach returned early, so the queue was never
published in tun->tfiles[] while TUNSETIFF still reported success. A failed
re-attach now aborts the attach, and the filter is detached again if a
later step of the attach fails.

It has to follow patch 1: with the check fixed but the program still read
from the caller's address space, an attach that used to succeed without a
filter would fail with -EFAULT or -EINVAL.

Patch 3 adds selftests for the re-attach path and for attaching a queue
without a filter. The two tests that cover the kernel copy fail without
patch 1; the rollback in patch 2 needs a failure inside tun_attach() after
the filter attach, which userspace cannot trigger reliably, so it has no
test.

Thanks to Willem de Bruijn for the review.

Rongguang Wei (3):
  tun: keep a kernel copy of the socket filter program
  tun: fix inverted error check when re-attaching the filter
  selftests: net: add TAP socket filter attach tests

---
v3:
  - reorder: the kernel copy of the program comes before the corrected
    error check, so that no step of the series turns an attach that
    succeeded without a filter into a failure
  - add sk_attach_filter_kern() in the patch that first uses it
  - address the review of the selftests
v2:
  - roll back the filter attach when a later step of tun_attach() fails
  - keep a copy of the program in the kernel, so that a later attach does
    not depend on the address space of the process that set the filter
  - add selftests for the re-attach and for a rejected TUNATTACHFILTER
v1:
  - https://lore.kernel.org/netdev/20260923025653.59348-1-clementwei90@163.com/ (local)
---
 drivers/net/tun.c                 |  50 +++++++++-
 include/linux/filter.h            |   1 +
 net/core/filter.c                 |  22 +++++
 tools/testing/selftests/net/tun.c | 155 ++++++++++++++++++++++++++++++
 4 files changed, 223 insertions(+), 5 deletions(-)


base-commit: 72d3fcf802c45d00b300f25b848a93c3a2bd7c7e
-- 
2.43.0

No virus found
		Checked by Hillstone Network AntiVirus