i40e/i40evf: Add a workaround to drop all flow control frames
authorAnjali Singhai Jain <anjali.singhai@intel.com>
Thu, 1 Oct 2015 18:37:34 +0000 (14:37 -0400)
committerJeff Kirsher <jeffrey.t.kirsher@intel.com>
Fri, 23 Oct 2015 11:17:55 +0000 (04:17 -0700)
commite7358f54a3954df16d4f87e3cad35063f1c17de5
treeca1124bdc83a7fdc1446914c509d9322c2bc3d44
parent7b1311807f3d3eb8bef3ccc53127838b3bea3771
i40e/i40evf: Add a workaround to drop all flow control frames

This patch adds a workaround to drop any flow control frames from being
transmitted from any VSI. FW can still send flow control frames if flow
control is enabled.

With this patch in place a malicious VF cannot send flow control or PFC
packets out on the wire.

Change-ID: I4303b24e98b93066d2767fec24dfe78be591c277
Signed-off-by: Anjali Singhai Jain <anjali.singhai@intel.com>
Tested-by: Andrew Bowers <andrewx.bowers@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
drivers/net/ethernet/intel/i40e/i40e_common.c
drivers/net/ethernet/intel/i40e/i40e_main.c
drivers/net/ethernet/intel/i40e/i40e_prototype.h
drivers/net/ethernet/intel/i40evf/i40e_prototype.h