netdev - Re: [PATCH 4.19 stable 0/3] net: ip6 defrag: backport fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAB=W+on1O-E6FpS6FqRFgVFO-ZCP26B5fSwTemmhhWw2TfnBCQ@mail.gmail.com>
Date:   Sun, 14 Apr 2019 12:28:25 -0600
From:   Captain Wiggum <captwiggum@...il.com>
To:     Peter Oskolkov <posk@...gle.com>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        stable@...r.kernel.org, netdev@...r.kernel.org,
        Peter Oskolkov <posk@...k.io>,
        David Miller <davem@...emloft.net>,
        Eric Dumazet <edumazet@...gle.com>,
        Sasha Levin <sashal@...nel.org>
Subject: Re: [PATCH 4.19 stable 0/3] net: ip6 defrag: backport fixes

Hi All,

I apologize for the delay, my lab was reserved for some other uses.
But we am going to run the full TAHI IPv6 test suite against this patch
on Tue, and I will reply with the results.

Thanks Peter and Google team for the patch!

--John Masinter

On Mon, Apr 8, 2019 at 6:10 PM Peter Oskolkov <posk@...gle.com> wrote:
>
> Currently, 4.19 and earlier stable kernels contain a security fix
> that is not fully IPv6 standard compliant.
>
> This patchset backports IPv6 defrag fixes from 5.1rc that restore
> standard-compliance.
>
> Original 5.1 patchet: https://patchwork.ozlabs.org/cover/1029418/
>
>
> John Masinter (captwiggum), could you, please, confirm that this
> patchset fixes TAHI tests?
>
>
> Peter Oskolkov (3):
>   net: IP defrag: encapsulate rbtree defrag code into callable functions
>   net: IP6 defrag: use rbtrees for IPv6 defrag
>   net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
>
>  include/net/inet_frag.h                 |  16 +-
>  include/net/ipv6_frag.h                 |  11 +-
>  net/ipv4/inet_fragment.c                | 293 ++++++++++++++++++++++++
>  net/ipv4/ip_fragment.c                  | 290 +++--------------------
>  net/ipv6/netfilter/nf_conntrack_reasm.c | 260 ++++++---------------
>  net/ipv6/reassembly.c                   | 233 +++++--------------
>  6 files changed, 477 insertions(+), 626 deletions(-)
>
> --
> 2.21.0.392.gf8f6787159e-goog
>