netdev - Re: [PATCH 4.19 stable 0/3] net: ip6 defrag: backport fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAB=W+onKD=TzvEWyKSp9r7aApMyTob_hAod4+oZNXwSiqapLig@mail.gmail.com>
Date:   Wed, 17 Apr 2019 11:51:27 -0600
From:   Captain Wiggum <captwiggum@...il.com>
To:     Peter Oskolkov <posk@...gle.com>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        stable@...r.kernel.org, netdev@...r.kernel.org,
        Peter Oskolkov <posk@...k.io>,
        David Miller <davem@...emloft.net>,
        Eric Dumazet <edumazet@...gle.com>,
        Sasha Levin <sashal@...nel.org>
Subject: Re: [PATCH 4.19 stable 0/3] net: ip6 defrag: backport fixes

Hi All,

We have built 4.19 with Peter's patch, and now all TAHI IPv6 tests
pass, even another issue I reported is fixed!
This patch looks great from our testing. Please accept this patch...
So that Peter can move on to 4.14.
Thank you Peter and Google crew for this patch!
I look forward to the fix for 4.14, and then 4.9.

--John Masinter

On Sun, Apr 14, 2019 at 12:28 PM Captain Wiggum <captwiggum@...il.com> wrote:
>
> Hi All,
>
> I apologize for the delay, my lab was reserved for some other uses.
> But we am going to run the full TAHI IPv6 test suite against this patch
> on Tue, and I will reply with the results.
>
> Thanks Peter and Google team for the patch!
>
> --John Masinter
>
> On Mon, Apr 8, 2019 at 6:10 PM Peter Oskolkov <posk@...gle.com> wrote:
> >
> > Currently, 4.19 and earlier stable kernels contain a security fix
> > that is not fully IPv6 standard compliant.
> >
> > This patchset backports IPv6 defrag fixes from 5.1rc that restore
> > standard-compliance.
> >
> > Original 5.1 patchet: https://patchwork.ozlabs.org/cover/1029418/
> >
> >
> > John Masinter (captwiggum), could you, please, confirm that this
> > patchset fixes TAHI tests?
> >
> >
> > Peter Oskolkov (3):
> >   net: IP defrag: encapsulate rbtree defrag code into callable functions
> >   net: IP6 defrag: use rbtrees for IPv6 defrag
> >   net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
> >
> >  include/net/inet_frag.h                 |  16 +-
> >  include/net/ipv6_frag.h                 |  11 +-
> >  net/ipv4/inet_fragment.c                | 293 ++++++++++++++++++++++++
> >  net/ipv4/ip_fragment.c                  | 290 +++--------------------
> >  net/ipv6/netfilter/nf_conntrack_reasm.c | 260 ++++++---------------
> >  net/ipv6/reassembly.c                   | 233 +++++--------------
> >  6 files changed, 477 insertions(+), 626 deletions(-)
> >
> > --
> > 2.21.0.392.gf8f6787159e-goog
> >