netdev - Re: possible bug in IPv6 MLD retransmissions

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 22 May 2013 02:40:27 +0200
From:	Hannes Frederic Sowa <hannes@...essinduktion.org>
To:	netdev@...r.kernel.org,
	Hideaki YOSHIFUJI <yoshfuji@...ux-ipv6.org>,
	David Miller <davem@...emloft.net>
Subject: Re: possible bug in IPv6 MLD retransmissions

On Tue, May 21, 2013 at 12:06:16PM -0300, Flavio Leitner wrote:
> On Sat, May 18, 2013 at 07:31:05PM +0200, Hannes Frederic Sowa wrote:
> > On Fri, May 17, 2013 at 12:24:49AM -0300, Flavio Leitner wrote:
> > > A tcpdump captured while adding an IPv6 link-local address shows
> > > two MLD reports. One with source ``::'' and another with the permanent
> > > address.
> > > 
> > > Well, if you increase dad_retransmits from 1 to 10, for instance,
> > > then both MLD reports are sent with source address ``::'' which
> > > according with specs should be ignored by the routers.
> > >
> > > [...]
> > >
> > > Therefore, I believe this is a bug in IPv6 MLD because it should
> > > sent at least 2 MLD reports after DAD is completed.
> > > The specs says:
> > >
> > > [..]
> > >
> > > Does that make any sense?
> > 
> > Yes, this is unfortunate. RFC3590 clarifies this also for MLDv1 messages.
> > 
> > Could you try following patch I just came up with?
> 
> It does work, but it would be better to send [Robustness Variable]
> times, right?

Sure, this is the more robust approach.

Patch is tested and seems fine:

Acked-by: Hannes Frederic Sowa <hannes@...essinduktion.org>

I tried to track if we actually used the unspecified address to send out
mld reports, but doing this correctly (multiple link-local addresses in
dad state) needed a bit of ugly lock handling and the code got bloated. So
I do think it is not worth the effort.

Thanks,

  Hannes

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html