netdev - Re: Regression (ancient), bisected: TCP hangs with certain ESP6 SA.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20101001092814.GA26722@gondor.apana.org.au>
Date:	Fri, 1 Oct 2010 18:28:14 +0900
From:	Herbert Xu <herbert@...dor.apana.org.au>
To:	David Miller <davem@...emloft.net>
Cc:	nbowler@...iptictech.com, linux-kernel@...r.kernel.org,
	netdev@...r.kernel.org, eric.dumazet@...il.com
Subject: Re: Regression (ancient), bisected: TCP hangs with certain ESP6 SA.

On Thu, Sep 30, 2010 at 06:17:16PM -0700, David Miller wrote:
> From: Nick Bowler <nbowler@...iptictech.com>
> Date: Wed, 29 Sep 2010 10:22:13 -0400
> 
> > b5c15fc004ac83b7ad280acbe0fd4bbed7e2c8d4 is the first bad commit
> > commit b5c15fc004ac83b7ad280acbe0fd4bbed7e2c8d4
> > Author: Herbert Xu <herbert@...dor.apana.org.au>
> > Date:   Thu Feb 14 23:49:37 2008 -0800
> > 
> >     [IPV6]: Fix reversed local_df test in ip6_fragment
> >     
> >     I managed to reverse the local_df test when forward-porting this
> >     patch so it actually makes things worse by never fragmenting at
> >     all.
> >     
> >     Thanks to David Stevens for testing and reporting this bug.
> >     
> >     Bill Fink pointed out that the local_df setting is also the wrong
> >     way around.
> >     
> >     Signed-off-by: Herbert Xu <herbert@...dor.apana.org.au>
> >     Signed-off-by: David S. Miller <davem@...emloft.net>
> 
> I suspect that Herbert's change is correct, it's just that for some
> reason PMTU doesn't work correctly with IPV6 for whatever reason.
> 
> That matches with your observed behavior that ping and UDP stuff
> works just fine, and it's just TCP with certain ESP6 transport mode
> settings.

Yeah I suspect if you go back even further (before the patch with
the reversed logic referred to above) that you'll find it to be
broken again.

I'll try to reproduce this but I may not be able to get to it until
November.

Cheers,
-- 
Email: Herbert Xu <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html