lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 30 Jul 2014 17:35:03 +0200 From: David Lamparter <equinox@...c24.net> To: Hannes Frederic Sowa <hannes@...essinduktion.org> Cc: David Lamparter <equinox@...c24.net>, "David S. Miller" <davem@...emloft.net>, netdev@...r.kernel.org, Stephen Hemminger <stephen@...workplumber.org> Subject: Re: [PATCH net-next] ipv6: addrconf: fix mcast route for GRE devices (New patch following in separate mail - I haven't touched addrconf_sit_config since I have no clue about ISATAP & the likes.) On Wed, Jul 30, 2014 at 05:14:42PM +0200, Hannes Frederic Sowa wrote: > On Mi, 2014-07-30 at 02:55 +0200, David Lamparter wrote: > > GRE devices, for some reason, were coming up with an autoconfigured > > address, but no ff00::/8 route in the local table. This breaks any kind > > of multicast, in particular OSPFv3, mDNS, - and ND. In fact, IPv6 only > > works at all because there is little need for ND on PtP devices. > > > > Adding any other IPv6 address on the device would rectify this issue > > through inet6_addr_add()/addrconf_add_dev() - and would leave the route > > around even if the address was later removed. (This is probably why > > this issue was not discovered earlier. AFAICS it has been there from > > the beginning, e.g. aee80b5 "generate link local address for GRE > > tunnel") > > Yep, this is poor, but changing this will break user space... How exactly will this break user space? > > (Note: multicast is supported on GRE devices of all kinds, including PtP > > GRE, P-t-Mcast GRE and NBMA-GRE.) > > > > Fixes: aee80b54b235 (ipv6: generate link local address for GRE tunnel) > > Signed-off-by: David Lamparter <equinox@...c24.net> > > Cc: Stephen Hemminger <stephen@...workplumber.org> > > We should install routes before joining LL, I would go with > > idev = addrconf_add_dev(dev); > if (IS_ERR(idev)) > return; > > in addrconf_gre_config etc. Well, yeah, to be honest I have no clue why these functions are separated as they are. Once fixed up, the only difference between addrconf_gre_config and addrconf_dev_config is the true/false value on prefix_route for addrconf_addr_gen... and what the rationale for that is, I can only consult an oracle for. How about pushing the switch(dev->type) down from addrconf_notify into addrconf_dev_config()? > Looks like we don't correctly configure ARPHRD_IP6GRE gre tunnels... IP6GRE doesn't currently auto-generate a link-local address at all, is that what you meant? (Yeah we could/should add that too...) -David -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists