netdev - Re: Please merge IPv6 fix for drop fragment smaller than MTU

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 1 Apr 2019 15:53:23 -0600
From:   Captain Wiggum <captwiggum@...il.com>
To:     Florian Westphal <fw@...len.de>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        Eric Dumazet <edumazet@...gle.com>,
        Peter Oskolkov <posk@...gle.com>, netdev@...r.kernel.org
Subject: Re: Please merge IPv6 fix for drop fragment smaller than MTU

Thank you for the feedback and the specific commits needed!

On Mon, Apr 1, 2019 at 3:48 PM Florian Westphal <fw@...len.de> wrote:
>
> Captain Wiggum <captwiggum@...il.com> wrote:
> > An error was introduced in 4.9.134 (and the other LTS branches also).
> > This causes 18 test cases from the TAHI IPv6 test suite to fail.
> > I added you to the mail thread about this subject a month back.
> > It has been fixed in upstream for some time now, but not in the LTS branches.
> > Please merge this undo-patch into the LTS branches.
>
> This is only safe after backporting Peters work to convert
> IPv6 to use RB Trees for the reassembly queues,
> otherwise a revert adds back the DoS vector.
>
> commit d4289fcc9b16b89619ee1c54f829e05e56de8b9a
> net: IP6 defrag: use rbtrees for IPv6 defrag
>
> commit 997dd96471641e147cb2c33ad54284000d0f5e35
> net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
>