netdev - Re: unintended ipv4 broadcast policy change

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 23 Jun 2011 13:45:04 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	shemminger@...tta.com
Cc:	herbert@...dor.hengli.com.au, netdev@...r.kernel.org
Subject: Re: unintended ipv4 broadcast policy change

From: Stephen Hemminger <shemminger@...tta.com>
Date: Thu, 23 Jun 2011 08:16:14 -0700

> On Wed, 22 Jun 2011 16:39:35 -0700 (PDT)
> David Miller <davem@...emloft.net> wrote:
> 
>> But debian definitely still has this bug.  On debian, as a result,
>> every packet received gets parsed.
> 
> Are you saying the DHCP client ends up parsing every packet?
> This doesn't appear to be true.
> 
> I checked and the dhclient spends its life waiting on select for DHCP port.

Which dhcp client do you have installed?  There are about 6 or 7 of
them available in debian.

Unless it closes the AF_PACKET socket after it gets a lease, it's
going to get every packet.  Because it uses a type argument of
"SOCK_PACKET" to the socket() call, the AF_PACKET layer will not use
the packet filter it installs during receive processing.

Check the source if you don't believe me, maybe whatever repo you're
using has different code in this area.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html