mirror of https://gitlab.com/qemu-project/qemu
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
7e0c22d585
QCryptoTLSSession allows TLS premature termination in two cases, one of the case is when the channel shutdown() is invoked on READ side. It's possible the shutdown() happened after the read thread blocked at gnutls_record_recv(). In this case, we should allow the premature termination to happen. The problem is by the time qcrypto_tls_session_read() was invoked, tioc->shutdown may not have been set, so this may instead be treated as an error if there is concurrent shutdown() calls. To allow the flag to reflect the latest status of tioc->shutdown, move the check upper into the QIOChannel level, so as to read the flag only after QEMU gets an GNUTLS_E_PREMATURE_TERMINATION. When at it, introduce qio_channel_tls_allow_premature_termination() helper to make the condition checks easier to read. When doing so, change the qatomic_load_acquire() to qatomic_read(): here we don't need any ordering of memory accesses, but reading a flag. qatomic_read() would suffice because it guarantees fetching from memory. Nothing else we should need to order on memory access. This patch will fix a qemu qtest warning when running the preempt tls test, reporting premature termination: QTEST_QEMU_BINARY=./qemu-system-x86_64 ./tests/qtest/migration-test --full -r /x86_64/migration/postcopy/preempt/tls/psk ... qemu-kvm: Cannot read from TLS channel: The TLS connection was non-properly terminated. ... In this specific case, the error was set by postcopy_preempt_thread, which normally will be concurrently shutdown()ed by the main thread. Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Reviewed-by: Juraj Marcin <jmarcin@redhat.com> Reviewed-by: Fabiano Rosas <farosas@suse.de> Link: https://lore.kernel.org/r/20250918203937.200833-2-peterx@redhat.com Signed-off-by: Peter Xu <peterx@redhat.com> |
3 weeks ago | |
|---|---|---|
| .. | ||
| aes-round.h | 2 years ago | |
| aes.h | 2 years ago | |
| afsplit.h | 1 year ago | |
| akcipher.h | 2 years ago | |
| block.h | 1 year ago | |
| cipher.h | 1 year ago | |
| clmul.h | 2 years ago | |
| desrfb.h | 3 years ago | |
| hash.h | 12 months ago | |
| hmac.h | 2 months ago | |
| init.h | 6 years ago | |
| ivgen.h | 1 year ago | |
| pbkdf.h | 1 year ago | |
| random.h | 6 years ago | |
| secret.h | 5 years ago | |
| secret_common.h | 2 years ago | |
| secret_keyring.h | 5 years ago | |
| sm4.h | 2 years ago | |
| tls-cipher-suites.h | 4 years ago | |
| tlscreds.h | 4 years ago | |
| tlscredsanon.h | 4 years ago | |
| tlscredspsk.h | 4 years ago | |
| tlscredsx509.h | 4 years ago | |
| tlssession.h | 3 weeks ago | |
| x509-utils.h | 1 year ago | |
| xts.h | 6 years ago | |