netdev - Re: eth_send of ARP packet returned -1 rather than expected 42

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 7 Jan 2019 18:01:38 +0200
From:   Ido Schimmel <idosch@...sch.org>
To:     Marco Berizzi <pupilla@...ero.it>
Cc:     netdev@...r.kernel.org
Subject: Re: eth_send of ARP packet returned -1 rather than expected 42

On Mon, Jan 07, 2019 at 04:26:30PM +0100, Marco Berizzi wrote:
> Hi Folks,
> 
> I'm getting this message when I run nmap 7.70 with
> linux 4.20
> 
> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:15 CET
> Initiating ARP Ping Scan at 16:15
> Scanning 10.81.104.82 [1 port]
> WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)
> WARNING: eth_send of ARP packet returned -1 rather than expected 42 (errno=22: Invalid argument)

Not sure it's the same issue, but can you test with commit 6b8d95f1795c
("packet: validate address length if non-zero")? It's in mainline
already and queued for -stable.

See similar report here:
https://www.spinics.net/lists/netdev/msg541807.html

> Completed ARP Ping Scan at 16:15, 0.42s elapsed (1 total hosts)
> Nmap scan report for 10.81.104.82 [host down]
> Read data files from: /usr/bin/../share/nmap
> Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
> Nmap done: 1 IP address (0 hosts up) scanned in 0.46 seconds
>            Raw packets sent: 2 (56B) | Rcvd: 0 (0B)
> root@...imero:/tmp# uname -a
> Linux Calimero 4.20.0 #1 SMP Fri Dec 28 11:16:37 CET 2018 x86_64 Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz GenuineIntel GNU/Linux
> 
> Linux 4.20-rc5 was fine:
> 
> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-07 16:22 CET
> Initiating ARP Ping Scan at 16:22
> Scanning 10.68.68.56 [1 port]
> Completed ARP Ping Scan at 16:22, 0.02s elapsed (1 total hosts)
> Initiating Parallel DNS resolution of 1 host. at 16:22
> Completed Parallel DNS resolution of 1 host. at 16:22, 0.01s elapsed
> Initiating SYN Stealth Scan at 16:22
> Scanning 10.68.68.56 [1000 ports]
> Discovered open port 22/tcp on 10.68.68.56
> Completed SYN Stealth Scan at 16:22, 0.03s elapsed (1000 total ports)
> Nmap scan report for 10.68.68.56
> Host is up (0.000081s latency).
> Not shown: 999 closed ports
> PORT   STATE SERVICE
> 22/tcp open  ssh
> MAC Address: FC:4D:D4:2E:CD:81 (Universal Global Scientific Industrial)
> 
> Read data files from: /usr/bin/../share/nmap
> Nmap done: 1 IP address (1 host up) scanned in 0.16 seconds
>            Raw packets sent: 1001 (44.028KB) | Rcvd: 1001 (40.032KB)
> root@...vos:~# uname -a
> Linux Tarvos 4.20.0-rc5 #1 SMP Wed Dec 5 17:16:15 CET 2018 x86_64 Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz GenuineIntel GNU/Linux
> 
> Any feedback are welcome.
> Thanks in advance
> 
> Marco