netdev - [RFC PATCH] net: blackhole route should always be recalculated

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4C77DE1C.4080506@6wind.com>
Date:	Fri, 27 Aug 2010 17:47:40 +0200
From:	Nicolas Dichtel <nicolas.dichtel@...nd.com>
To:	netdev <netdev@...r.kernel.org>
Subject: [RFC PATCH] net: blackhole route should always be recalculated

Hi all,

I got a problem with IKE when the first packet is dropped, kernel does not 
invalidate the routing cache for next packets.

It seems to come from commit d11a4dc18bf41719c9f0d7ed494d295dd2973b92, which 
check validy of routes. With this patch, blackhole routes are not recalculated 
(when route table is not updated).
But this kind of routes are used when xfrm_lookup() returns -EREMOTE, so it 
seems logical to check the route again for next packets, and then get the right 
route.

Maybe my approach is wrong, any comments are welcome.

Regards,
Nicolas

View attachment "0001-net-blackhole-route-should-always-be-recalculated.patch" of type "text/x-diff" (1447 bytes)