linux-kernel - Re: Regression (ancient), bisected: TCP hangs with certain ESP6 SA.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 30 Sep 2010 18:17:16 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	nbowler@...iptictech.com
Cc:	linux-kernel@...r.kernel.org, netdev@...r.kernel.org,
	herbert@...dor.apana.org.au, eric.dumazet@...il.com
Subject: Re: Regression (ancient), bisected: TCP hangs with certain ESP6 SA.

From: Nick Bowler <nbowler@...iptictech.com>
Date: Wed, 29 Sep 2010 10:22:13 -0400

> b5c15fc004ac83b7ad280acbe0fd4bbed7e2c8d4 is the first bad commit
> commit b5c15fc004ac83b7ad280acbe0fd4bbed7e2c8d4
> Author: Herbert Xu <herbert@...dor.apana.org.au>
> Date:   Thu Feb 14 23:49:37 2008 -0800
> 
>     [IPV6]: Fix reversed local_df test in ip6_fragment
>     
>     I managed to reverse the local_df test when forward-porting this
>     patch so it actually makes things worse by never fragmenting at
>     all.
>     
>     Thanks to David Stevens for testing and reporting this bug.
>     
>     Bill Fink pointed out that the local_df setting is also the wrong
>     way around.
>     
>     Signed-off-by: Herbert Xu <herbert@...dor.apana.org.au>
>     Signed-off-by: David S. Miller <davem@...emloft.net>

I suspect that Herbert's change is correct, it's just that for some
reason PMTU doesn't work correctly with IPV6 for whatever reason.

That matches with your observed behavior that ping and UDP stuff
works just fine, and it's just TCP with certain ESP6 transport mode
settings.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/