2. DPDK Release 17.08
2.1. New Features
Increase minimum x86 ISA version to SSE4.2.
Starting with version 17.08, DPDK requires SSE4.2 to run on x86. Previous versions required SSE3.
Added Service Core functionality.
The service core functionality added to EAL allows DPDK to run services such as software PMDs on lcores without the application manually running them. The service core infrastructure allows flexibility of running multiple services on the same service lcore, and provides the application with powerful APIs to configure the mapping from service lcores to services.
Added Generic Receive Offload API.
Added Generic Receive Offload (GRO) API support to reassemble TCP/IPv4 packets. The GRO API assumes all input packets have the correct checksums. GRO API doesn’t update checksums for merged packets. If input packets are IP fragmented, the GRO API assumes they are complete packets (i.e. with L4 headers).
Added Fail-Safe PMD
Added the new Fail-Safe PMD. This virtual device allows applications to support seamless hotplug of devices. See the Fail-safe poll mode driver library guide for more details about this driver.
Added support for generic flow API (rte_flow) on igb NICs.
This API provides a generic means of configuring hardware to match specific ingress or egress traffic, altering its behavior and querying related counters according to any number of user-defined rules.
Added generic flow API support for Ethernet, IPv4, UDP, TCP and RAW pattern items with QUEUE actions. There are four types of filter support for this feature on igb.
Added support for generic flow API (rte_flow) on enic.
Added flow API support for outer Ethernet, VLAN, IPv4, IPv6, UDP, TCP, SCTP, VxLAN and inner Ethernet, VLAN, IPv4, IPv6, UDP and TCP pattern items with QUEUE, MARK, FLAG and VOID actions for ingress traffic.
Added support for Chelsio T6 family of adapters
The CXGBE PMD was updated to run Chelsio T6 family of adapters.
Added latency and performance improvements for cxgbe
the Tx and Rx path in cxgbe were reworked to improve performance. In addition the latency was reduced for slow traffic.
Updated the bnxt PMD.
Updated the bnxt PMD. The major enhancements include:
- Support MTU modification.
- Add support for LRO.
- Add support for VLAN filter and strip functionality.
- Additional enhancements to add support for more dev_ops.
- Added PMD specific APIs mainly to control VF from PF.
- Update HWRM version to 1.7.7
Added support for Rx interrupts on mlx4 driver.
Rx queues can be now be armed with an interrupt which will trigger on the next packet arrival.
Updated mlx5 driver.
Updated the mlx5 driver including the following changes:
- Added vectorized Rx/Tx burst for x86.
- Added support for isolated mode from flow API.
- Reworked the flow drop action to implement in hardware classifier.
- Improved Rx interrupts management.
Updated szedata2 PMD.
Added support for firmware with multiple Ethernet ports per physical port.
Updated dpaa2 PMD.
Updated dpaa2 PMD. Major enhancements include:
- Added support for MAC Filter configuration.
- Added support for Segmented Buffers.
- Added support for VLAN filter and strip functionality.
- Additional enhancements to add support for more dev_ops.
- Optimized the packet receive path
Reorganized the symmetric crypto operation structure.
The crypto operation (
rte_crypto_sym_op
) has been reorganized as follows:- Removed the
rte_crypto_sym_op_sess_type
field. - Replaced the pointer and physical address of IV with offset from the start of the crypto operation.
- Moved length and offset of cipher IV to
rte_crypto_cipher_xform
. - Removed “Additional Authentication Data” (AAD) length.
- Removed digest length.
- Removed AAD pointer and physical address from
auth
structure. - Added
aead
structure, containing parameters for AEAD algorithms.
- Removed the
Reorganized the crypto operation structure.
The crypto operation (
rte_crypto_op
) has been reorganized as follows:- Added the
rte_crypto_op_sess_type
field. - The enumerations
rte_crypto_op_status
andrte_crypto_op_type
have been modified to beuint8_t
values. - Removed the field
opaque_data
. - Pointer to
rte_crypto_sym_op
has been replaced with a zero length array.
- Added the
Reorganized the crypto symmetric session structure.
The crypto symmetric session structure (
rte_cryptodev_sym_session
) has been reorganized as follows:- The
dev_id
field has been removed. - The
driver_id
field has been removed. - The mempool pointer
mp
has been removed. - Replaced
private
marker with array of pointers to private data sessionssess_private_data
.
- The
Updated cryptodev library.
- Added AEAD algorithm specific functions and structures, so it is not necessary to use a combination of cipher and authentication structures anymore.
- Added helper functions for crypto device driver identification.
- Added support for multi-device sessions, so a single session can be used in multiple drivers.
- Added functions to initialize and free individual driver private data with the same session.
Updated dpaa2_sec crypto PMD.
Added support for AES-GCM and AES-CTR.
Updated the AESNI MB PMD.
The AESNI MB PMD has been updated with additional support for:
- 12-byte IV on AES Counter Mode, apart from the previous 16-byte IV.
Updated the AES-NI GCM PMD.
The AES-NI GCM PMD was migrated from the ISA-L library to the Multi Buffer library, as the latter library has Scatter Gather List support now. The migration entailed adding additional support for 192-bit keys.
Updated the Cryptodev Scheduler PMD.
Added a multicore based distribution mode, which distributes the enqueued crypto operations among several slaves, running on different logical cores.
Added NXP DPAA2 Eventdev PMD.
Added the new dpaa2 eventdev driver for NXP DPAA2 devices. See the “Event Device Drivers” document for more details on this new driver.
Added dpdk-test-eventdev test application.
The dpdk-test-eventdev tool is a Data Plane Development Kit (DPDK) application that allows exercising various eventdev use cases. This application has a generic framework to add new eventdev based test cases to verify functionality and measure the performance parameters of DPDK eventdev devices.
2.2. Known Issues
- Starting with version 17.08, libnuma is required to build DPDK.
2.3. API Changes
Modified the _rte_eth_dev_callback_process function in the ethdev library.
The function
_rte_eth_dev_callback_process()
has been modified. The return value has been changed from void to int and an extra parametervoid *ret_param
has been added.Moved bypass functions from the rte_ethdev library to ixgbe PMD
- The following rte_ethdev library functions were removed:
rte_eth_dev_bypass_event_show()
rte_eth_dev_bypass_event_store()
rte_eth_dev_bypass_init()
rte_eth_dev_bypass_state_set()
rte_eth_dev_bypass_state_show()
rte_eth_dev_bypass_ver_show()
rte_eth_dev_bypass_wd_reset()
rte_eth_dev_bypass_wd_timeout_show()
rte_eth_dev_wd_timeout_store()
- The following ixgbe PMD functions were added:
rte_pmd_ixgbe_bypass_event_show()
rte_pmd_ixgbe_bypass_event_store()
rte_pmd_ixgbe_bypass_init()
rte_pmd_ixgbe_bypass_state_set()
rte_pmd_ixgbe_bypass_state_show()
rte_pmd_ixgbe_bypass_ver_show()
rte_pmd_ixgbe_bypass_wd_reset()
rte_pmd_ixgbe_bypass_wd_timeout_show()
rte_pmd_ixgbe_bypass_wd_timeout_store()
- The following rte_ethdev library functions were removed:
Reworked rte_cryptodev library.
The rte_cryptodev library has been reworked and updated. The following changes have been made to it:
- The crypto device type enumeration has been removed from cryptodev library.
- The function
rte_crypto_count_devtype()
has been removed, and replaced by the new functionrte_crypto_count_by_driver()
. - Moved crypto device driver names definitions to the particular PMDs. These names are not public anymore.
- The
rte_cryptodev_configure()
function does not create the session mempool for the device anymore. - The
rte_cryptodev_queue_pair_attach_sym_session()
andrte_cryptodev_queue_pair_dettach_sym_session()
functions require the new parameterdevice id
. - Parameters of
rte_cryptodev_sym_session_create()
were modified to acceptmempool
, instead ofdevice id
andrte_crypto_sym_xform
. - Removed
device id
parameter fromrte_cryptodev_sym_session_free()
. - Added a new field
session_pool
torte_cryptodev_queue_pair_setup()
. - Removed
aad_size
parameter fromrte_cryptodev_sym_capability_check_auth()
. - Added
iv_size
parameter torte_cryptodev_sym_capability_check_auth()
. - Removed
RTE_CRYPTO_OP_STATUS_ENQUEUED
from enumrte_crypto_op_status
.
2.4. ABI Changes
Changed type of
domain
field inrte_pci_addr
touint32_t
to follow the PCI standard.Added new
rte_bus
experimental APIs available as operators within therte_bus
structure.Made
rte_devargs
structure internal device representation generic to prepare for a bus-agnostic EAL.Reorganized the crypto operation structures.
Some fields have been modified in the
rte_crypto_op
andrte_crypto_sym_op
structures, as described in the New Features section.Reorganized the crypto symmetric session structure.
Some fields have been modified in the
rte_cryptodev_sym_session
structure, as described in the New Features section.Reorganized the rte_crypto_sym_cipher_xform structure.
- Added cipher IV length and offset parameters.
- Changed field size of key length from
size_t
touint16_t
.
Reorganized the rte_crypto_sym_auth_xform structure.
- Added authentication IV length and offset parameters.
- Changed field size of AAD length from
uint32_t
touint16_t
. - Changed field size of digest length from
uint32_t
touint16_t
. - Removed AAD length.
- Changed field size of key length from
size_t
touint16_t
.
Replaced
dev_type
enumeration withuint8_t
driver_id
inrte_cryptodev_info
andrte_cryptodev
structures.Removed
session_mp
fromrte_cryptodev_config
.
2.6. Tested Platforms
Intel(R) platforms with Mellanox(R) NICs combinations
- Platform details:
- Intel(R) Xeon(R) CPU E5-2697A v4 @ 2.60GHz
- Intel(R) Xeon(R) CPU E5-2697 v3 @ 2.60GHz
- Intel(R) Xeon(R) CPU E5-2680 v2 @ 2.80GHz
- Intel(R) Xeon(R) CPU E5-2640 @ 2.50GHz
- OS:
- Red Hat Enterprise Linux Server release 7.3 (Maipo)
- Red Hat Enterprise Linux Server release 7.2 (Maipo)
- Ubuntu 16.10
- Ubuntu 16.04
- Ubuntu 14.04
- MLNX_OFED: 4.1-1.0.2.0
- NICs:
- Mellanox(R) ConnectX(R)-3 Pro 40G MCX354A-FCC_Ax (2x40G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1007
- Firmware version: 2.40.5030
- Mellanox(R) ConnectX(R)-4 10G MCX4111A-XCAT (1x10G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 10G MCX4121A-XCAT (2x10G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 25G MCX4111A-ACAT (1x25G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 25G MCX4121A-ACAT (2x25G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 40G MCX4131A-BCAT/MCX413A-BCAT (1x40G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 40G MCX415A-BCAT (1x40G)
- Host interface: PCI Express 3.0 x16
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 50G MCX4131A-GCAT/MCX413A-GCAT (1x50G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 50G MCX414A-BCAT (2x50G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 50G MCX415A-GCAT/MCX416A-BCAT/MCX416A-GCAT
(2x50G)
- Host interface: PCI Express 3.0 x16
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 50G MCX415A-CCAT (1x100G)
- Host interface: PCI Express 3.0 x16
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 100G MCX416A-CCAT (2x100G)
- Host interface: PCI Express 3.0 x16
- Device ID: 15b3:1013
- Firmware version: 12.18.2000
- Mellanox(R) ConnectX(R)-4 Lx 10G MCX4121A-XCAT (2x10G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1015
- Firmware version: 14.18.2000
- Mellanox(R) ConnectX(R)-4 Lx 25G MCX4121A-ACAT (2x25G)
- Host interface: PCI Express 3.0 x8
- Device ID: 15b3:1015
- Firmware version: 14.18.2000
- Mellanox(R) ConnectX(R)-5 100G MCX556A-ECAT (2x100G)
- Host interface: PCI Express 3.0 x16
- Device ID: 15b3:1017
- Firmware version: 16.19.1200
- Mellanox(R) ConnectX-5 Ex EN 100G MCX516A-CDAT (2x100G)
- Host interface: PCI Express 4.0 x16
- Device ID: 15b3:1019
- Firmware version: 16.19.1200
- Mellanox(R) ConnectX(R)-3 Pro 40G MCX354A-FCC_Ax (2x40G)
- Platform details:
Intel(R) platforms with Intel(R) NICs combinations
- CPU
- Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
- Intel(R) Xeon(R) CPU D-1540 @ 2.00GHz
- Intel(R) Xeon(R) CPU D-1541 @ 2.10GHz
- Intel(R) Xeon(R) CPU E5-4667 v3 @ 2.00GHz
- Intel(R) Xeon(R) CPU E5-2680 v2 @ 2.80GHz
- Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz
- Intel(R) Xeon(R) CPU E5-2695 v4 @ 2.10GHz
- Intel(R) Xeon(R) CPU E5-2658 v2 @ 2.40GHz
- Intel(R) Xeon(R) CPU E5-2658 v3 @ 2.20GHz
- OS:
- CentOS 7.2
- Fedora 25
- FreeBSD 11
- Red Hat Enterprise Linux Server release 7.3
- SUSE Enterprise Linux 12
- Wind River Linux 8
- Ubuntu 16.04
- Ubuntu 16.10
- NICs:
- Intel(R) 82599ES 10 Gigabit Ethernet Controller
- Firmware version: 0x61bf0001
- Device id (pf/vf): 8086:10fb / 8086:10ed
- Driver version: 4.0.1-k (ixgbe)
- Intel(R) Corporation Ethernet Connection X552/X557-AT 10GBASE-T
- Firmware version: 0x800001cf
- Device id (pf/vf): 8086:15ad / 8086:15a8
- Driver version: 4.2.5 (ixgbe)
- Intel(R) Ethernet Converged Network Adapter X710-DA4 (4x10G)
- Firmware version: 6.01 0x80003205
- Device id (pf/vf): 8086:1572 / 8086:154c
- Driver version: 2.0.19 (i40e)
- Intel(R) Ethernet Converged Network Adapter X710-DA2 (2x10G)
- Firmware version: 6.01 0x80003204
- Device id (pf/vf): 8086:1572 / 8086:154c
- Driver version: 2.0.19 (i40e)
- Intel(R) Ethernet Converged Network Adapter XXV710-DA2 (2x25G)
- Firmware version: 6.01 0x80003221
- Device id (pf/vf): 8086:158b
- Driver version: 2.0.19 (i40e)
- Intel(R) Ethernet Converged Network Adapter XL710-QDA2 (2X40G)
- Firmware version: 6.01 0x8000321c
- Device id (pf/vf): 8086:1583 / 8086:154c
- Driver version: 2.0.19 (i40e)
- Intel(R) Corporation I350 Gigabit Network Connection
- Firmware version: 1.48, 0x800006e7
- Device id (pf/vf): 8086:1521 / 8086:1520
- Driver version: 5.2.13-k (igb)
- Intel(R) 82599ES 10 Gigabit Ethernet Controller
- CPU
2.7. Fixes in 17.08 Stable Release
2.7.1. 17.08.1
- app/crypto-perf: fix packet length check
- app/crypto-perf: fix uninitialized errno value
- app/crypto-perf: parse AEAD data from vectors
- app/test-crypto-perf: fix compilation with -Og
- app/test-crypto-perf: fix memory leak
- app/testpmd: fix build without ixgbe and bnxt PMDs
- app/testpmd: fix DDP package filesize detection
- app/testpmd: fix forwarding between non consecutive ports
- app/testpmd: fix forward port ids setting
- app/testpmd: fix invalid port id parameters
- app/testpmd: fix mapping of user priority to DCB TC
- app/testpmd: fix packet throughput after stats reset
- app/testpmd: fix quitting in container
- app/testpmd: fix RSS structure initialisation
- app/testpmd: fix topology error message
- crypto/aesni_gcm: fix zero data operation
- crypto/aesni_mb: fix invalid session error
- cryptodev: fix build with -Ofast
- crypto/dpaa2_sec: add check for segmented buffer
- crypto/dpaa2_sec: remove ICV memset on decryption side
- crypto/openssl: fix AEAD parameters
- crypto/qat: fix HMAC supported digest sizes
- drivers/crypto: use snprintf return value correctly
- eal: copy raw strings taken from command line
- eal: fix auxv open check for ARM and PPC
- eal: initialize logging before bus
- eal/x86: fix atomic cmpset
- ethdev: fix ABI version
- ethdev: revert use port name from device structure
- examples/ipsec-secgw: fix AAD length setting
- examples/ipsec-secgw: fix crypto device mapping
- examples/ipsec-secgw: fix IPv6 payload length
- examples/ipsec-secgw: fix IP version check
- examples/ipsec-secgw: fix session creation
- examples/l2fwd-crypto: fix physical address setting
- examples/l2fwd-crypto: fix uninitialized errno value
- examples/l2fwd_fork: fix message pool init
- examples/l3fwd: fix aliasing in port grouping
- examples/l3fwd: fix NEON instructions
- examples/multi_process: fix received message length
- examples/qos_sched: fix uninitialized config
- examples/vhost_scsi: fix product id string termination
- gro: fix typo in map file
- hash: fix eviction counter
- igb_uio: remove device reset in open
- kni: fix SLE version detection
- lpm6: fix compilation with -Og
- mem: fix malloc debug config
- mem: fix malloc element free in debug mode
- net/ark: fix loop counter
- net/bnxt: check VLANs from pool map only for VMDq
- net/bnxt: do not set hash type unnecessarily
- net/bnxt: fix a bit shift operation
- net/bnxt: fix an issue with broadcast traffic
- net/bnxt: fix an issue with group id calculation
- net/bnxt: fix an unused value
- net/bnxt: fix a pointer deref before null check
- net/bnxt: fix a potential null pointer dereference
- net/bnxt: fix a potential null pointer dereference
- net/bnxt: fix calculation of number of pools
- net/bnxt: fix compilation with -Og
- net/bnxt: fix config RSS update
- net/bnxt: fix HWRM macros and locking
- net/bnxt: fix interrupt handler
- net/bnxt: fix number of MAC addresses for VMDq
- net/bnxt: fix per queue stats display in xstats
- net/bnxt: fix Rx handling and buffer allocation logic
- net/bnxt: fix Rx offload capability
- net/bnxt: fix the association of a MACVLAN per VNIC
- net/bnxt: fix Tx offload capability
- net/bnxt: fix usage of VMDq flags
- net/bnxt: fix VLAN spoof configuration
- net/bnxt: handle multi queue mode properly
- net/bnxt: handle Rx multi queue creation properly
- net/bnxt: remove redundant code parsing pool map
- net/bnxt: set checksum offload flags correctly
- net/bnxt: set the hash key size
- net/bnxt: update status of Rx IP/L4 CKSUM
- net/bnxt: use 64-bits of address for VLAN table
- net/bonding: fix check slaves link properties
- net/bonding: fix default aggregator mode to stable
- net/bonding: fix slaves capacity check
- net/bonding: support bifurcated driver in eal
- net/cxgbe: fix memory leak
- net/dpaa2: fix the Tx handling of non HW pool bufs
- net/dpaa2: set queues after reconfiguration
- net/enic: fix assignment
- net/enic: fix multi-process operation
- net/enic: fix packet loss after MTU change
- net/enic: fix possible null pointer dereference
- net/enic: fix TSO for packets greater than 9208 bytes
- net/failsafe: fix adding MAC error report miss
- net/failsafe: fix errno set on command execution
- net/failsafe: fix failsafe bus uninit return value
- net/failsafe: fix parameters parsing
- net/failsafe: fix PCI devices init
- net/failsafe: fix Rx clean race
- net/failsafe: fix Tx sub device deactivating
- net/failsafe: fix VLAN stripping configuration
- net: fix inner L2 length in packet type parser
- net/i40e: fix assignment of enum values
- net/i40e: fix clear xstats bug in VF
- net/i40e: fix flexible payload configuration
- net/i40e: fix flow control watermark mismatch
- net/i40e: fix i40evf MAC filter table
- net/i40e: fix interrupt throttling setting in PF
- net/i40e: fix mbuf free in vector Tx
- net/i40e: fix memory leak if VF init fails
- net/i40e: fix mirror rule reset when port is closed
- net/i40e: fix mirror with firmware 6.0
- net/i40e: fix not supporting NULL TM profile
- net/i40e: fix packet count for PF
- net/i40e: fix parent when adding TM node
- net/i40e: fix PF notify issue when VF is not up
- net/i40e: fix Rx packets number for NEON
- net/i40e: fix TM level capability getting
- net/i40e: fix TM node parameter checking
- net/i40e: fix uninitialized variable
- net/i40e: fix variable assignment
- net/i40e: fix VF device stop issue
- net/i40e: fix VF initialization error
- net/i40e: fix VFIO interrupt mapping in VF
- net/igb: fix memcpy length
- net/igb: fix Rx interrupt with VFIO and MSI-X
- net/ixgbe: fix adding a mirror rule
- net/ixgbe: fix filter parser for L2 tunnel
- net/ixgbe: fix MAC VLAN filter fail problem
- net/ixgbe: fix mapping of user priority to TC
- net/ixgbe: fix not supporting NULL TM profile
- net/ixgbe: fix PF DCB info
- net/ixgbe: fix Rx queue interrupt mapping in VF
- net/ixgbe: fix TM level capability getting
- net/ixgbe: fix TM node parameter checking
- net/ixgbe: fix uninitialized variable
- net/ixgbe: fix VFIO interrupt mapping in VF
- net/kni: remove driver struct forward declaration
- net/liquidio: fix uninitialized variable
- net/mlx5: fix calculating TSO inline size
- net/mlx5: fix clang build
- net/mlx5: fix clang compilation error
- net/mlx5: fix locking in xstats functions
- net/mlx5: fix num seg assumption in SSE Tx
- net/mlx5: fix overflow of Rx SW ring
- net/mlx5: fix packet type flags for Ethernet only frame
- net/mlx5: fix probe failure report
- net/mlx5: fix SSE Rx support verification
- net/mlx5: fix TSO segment size verification
- net/mlx5: fix tunneled TCP/UDP packet type
- net/mlx5: fix tunnel offload detection
- net/mlx5: fix Tx stats error counter definition
- net/mlx5: fix Tx stats error counter logic
- net/nfp: fix RSS
- net/nfp: fix Rx interrupt when multiqueue
- net/pcap: fix memory leak in dumper open
- net/qede/base: fix division by zero
- net/qede/base: fix return code to align with FW
- net/qede/base: fix to use a passed ptt handle
- net/qede: disable per-VF Tx switching feature
- net/qede: fix compilation with -Og
- net/qede: fix default config option
- net/qede: fix icc build
- net/qede: fix possible null pointer dereference
- net/qede: fix supported packet types
- net/qede: fix to re-enable LRO during device start
- net/qede: remove duplicate includes
- net/sfc/base: fix default RSS context check on Siena
- net/sfc: fix unused variable in RSS-agnostic build
- net/sfc: specify correct scale table size on Rx start
- net/tap: fix flow and port commands
- net/tap: fix unregistering callback with invalid fd
- net/virtio: check error on setting non block flag
- net/virtio: fix compilation with -Og
- net/virtio: fix log levels in configure
- net/virtio: fix mbuf port for simple Rx function
- net/virtio: fix queue setup consistency
- net/virtio: fix Tx packet length stats
- net/virtio: fix untrusted scalar value
- net/virtio: flush Rx queues on start
- net/virtio: revert not claiming IP checksum offload
- net/virtio: revert not claiming LRO support
- net/virtio-user: fix TAP name string termination
- net/vmxnet3: fix dereference before null check
- net/vmxnet3: fix MAC address set
- net/vmxnet3: fix memory leak when releasing queues
- net/vmxnet3: fix unintentional integer overflow
- Revert “net/virtio: flush Rx queues on start”
- service: fix build with gcc 4.9
- test/crypto: fix dpaa2 sec macros and definitions
- test: fix assignment operation
- timer: use 64-bit specific code on more platforms
- vfio: fix close unchecked file descriptor
- vfio: fix secondary process initialization
- vhost: check poll error code
- vhost: fix dereferencing invalid pointer after realloc
2.7.2. 17.08.2
- examples/vhost: move to safe GPA translation API
- examples/vhost_scsi: move to safe GPA translation API
- vhost: add support for non-contiguous indirect descs tables (fixes CVE-2018-1059)
- vhost: check all range is mapped when translating GPAs (fixes CVE-2018-1059)
- vhost: deprecate unsafe GPA translation API (fixes CVE-2018-1059)
- vhost: ensure all range is mapped when translating QVAs (fixes CVE-2018-1059)
- vhost: handle virtually non-contiguous buffers in Rx (fixes CVE-2018-1059)
- vhost: handle virtually non-contiguous buffers in Rx-mrg (fixes CVE-2018-1059)
- vhost: introduce safe API for GPA translation (fixes CVE-2018-1059)
- vhost-user: fix deadlock in case of NUMA realloc