netdev - RE: Atheros Communications Inc. AR8121/AR8113/AR8114 Gigabit or Fast Ethernet (rev b0) 1.0.0.7 md5/sha1 corrupted using NFS and samba (updated) Version 2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <157393863283F442885425D2C4542856489E7CFC@nasanexd02f.na.qualcomm.com>
Date:	Sun, 24 Mar 2013 05:16:03 +0000
From:	"Huang, Xiong" <xiong@....qualcomm.com>
To:	Hannes Frederic Sowa <hannes@...essinduktion.org>
CC:	Sven Hartge <sven@...nhartge.de>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: RE: Atheros Communications Inc. AR8121/AR8113/AR8114 Gigabit or
 Fast Ethernet (rev b0) 1.0.0.7 md5/sha1 corrupted using NFS and samba
 (updated) Version 2

> > >
> > > Btw the captured corrupted packets are ordinary non-fragmented TCP
> > > IPv4 packets. But perhaps these flags are dual-use?
> > >
> > Not dual-use.  You could check  flags for corrupted packets and compare it
> with good packet.
> > Your corrupted packet is just TCP checksum error ?
> 
> I'll try it.
> 
> The caputered packets show that a 16 byte segment overwrites later data in
> the same packet, sometimes even multiple contiguous 16 byte segments.
> 
> The corrupted packets look like this:
> 
> ...ABC....DBBEF..
> 
> Each character represents a 16 byte region, the dots are dont-care
> placeholders. The BB-region is overwritten by the data of the first B-region.
> 

It looks like a DMA issue. Not checksum related. :(


Xiong