netdev - Re: VRF: ICMPV6 Echo Reply failed to egress if ingress pkt Src is IPV6 Global and Dest is IPV6 Link Local.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 3 May 2018 21:32:44 -0600
From:   David Ahern <dsahern@...il.com>
To:     Sukumar Gopalakrishnan <sukumarg1973@...il.com>,
        netdev@...r.kernel.org
Subject: Re: VRF: ICMPV6 Echo Reply failed to egress if ingress pkt Src is
 IPV6 Global and Dest is IPV6 Link Local.

On 4/30/18 6:58 AM, Sukumar Gopalakrishnan wrote:
> VRF: ICMPV6 Echo Reply failed to egress if ingress pkt Src is IPV6
> Global and Dest is IPV6 Link Local.

...

> if (fl6->flowi6_oif == dev->ifindex) {

try adding ' && !rt6_need_strict(saddr)' to the above.

If it works, add a comment above the line noting this case (link local
dest and global source) submit a patch.


>                 dst = &net->ipv6.ip6_null_entry->dst;
>                 dst_hold(dst);
>                 return dst;
>         }
> ..
> 
> 
> TEMP FIX:
> =========
> 
> Return Ingress vlan device's ifIndex instead of skb->dev's.
> 
> static int icmp6_iif(const struct sk_buff *skb)
> {
>         int iif = IP6CB(skb)->iif; // skb->dev->ifindex;
> 
> ..
> ..
> }
>