netdev - Re: TAHI CN-6-4-1 failed on Linux 2.6.32 kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <AANLkTik9=TcMWzNyKWYyDu+bbGscPne6++gD42aju9s_@mail.gmail.com>
Date:	Fri, 13 Aug 2010 17:25:27 -0500
From:	Steve Chen <schen@...sta.com>
To:	Brian Haley <brian.haley@...com>
Cc:	usagi-users-ctl@...linux-ipv6.org, netdev@...r.kernel.org
Subject: Re: TAHI CN-6-4-1 failed on Linux 2.6.32 kernel

On Fri, Aug 13, 2010 at 12:55 PM, Brian Haley <brian.haley@...com> wrote:
> On 08/13/2010 01:34 PM, Steve Chen wrote:
>>>>>> The TAHI correspondent node tests CN-6-4-1 (Processing in upper layer
>>>>>> - Echo Checksum) failed for me in the 2.6.32 kernel.  It appears that
>>>>>> the Linux kernel is replying the ICMP echo request in
>>>>>> icmpv6_echo_reply without much checking.  Is this an intentional
>>>>>> non-conformance to RFC3775 section 9.3.1?
> [snip]
>
>> It appears that skb->ip_summed is always 1 (CHECKSUM_UNNECESSARY).
>> I'm using e1000e.  Looking at the driver, there is a checksum offload
>> hardware.  I think the code is doing frame check on the entire
>> Ethernet packet.  Since no error was found, it assume everything
>> inside is correct.
>
> # ethtool -K ethX rx off
>
> Does that help?  Does using a different NIC help?
>

ethtool did not help.

I tried to run the test with a different NIC, but I keep getting

...

IPSEC_AKEY      :               --------------------
IPSEC_EALGO     :               ---------
IPSEC_EKEY      :               ------------------------
IPSEC_SUPPORT   :               OFF
RR_TIMEOUT      :               3
TIMEOUT :               2
WAIT_RATELIMIT  :               1
send Ra_R0_AllNd
Wait 3 sec.
Clear Captured Packets (Link0)
Clear Captured Packets (Link0)
send Ns_R0_AllNd
######### Packe Name(RH) Field Value(NextHeader) is NULL
CNT_SendAndRecv Status=UnKnown
NG UnKnown
  -> Initialization Fail
...

I'm have not been able to locate problem...  Will continue to look Monday.

Steve
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html