lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Tue, 11 May 2021 09:18:04 +0800 (CST)
From:   meijusan <meijusan@....com>
To:     "Jakub Kicinski" <kuba@...nel.org>
Cc:     davem@...emloft.net, yoshfuji@...ux-ipv6.org, dsahern@...nel.org,
        netdev@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re:Re: [PATCH] net/ipv4/ip_fragment:fix missing Flags reserved bit
 set in iphdr


At 2021-05-08 06:59:00, "Jakub Kicinski" <kuba@...nel.org> wrote:
>On Thu,  6 May 2021 22:59:05 +0800 meijusan wrote:
>> ip frag with the iphdr flags reserved bit set,via router,ip frag reasm or
>> fragment,causing the reserved bit is reset to zero.
>> 
>> Keep reserved bit set is not modified in ip frag  defrag or fragment.
>> 
>> Signed-off-by: meijusan <meijusan@....com>
>
>Could you please provide more background on why we'd want to do this?

>Preferably with references to relevant (non-April Fools' Day) RFCs.

[background]
the Simple network usage scenarios: the one PC software<--->linux router(L3)/linux bridege(L2,bridge-nf-call-iptables)<--->the other PC software
1)the PC software send the ip packet with the iphdr flags reserved bit is set, when ip packet(not fragments ) via the one linux router/linux bridge,and the iphdr flags reserved bit is not modified;
2)but the ip fragments via router,the linux IP reassembly or fragmentation ,causing the reserved bit is reset to zero,Which leads to The other PC software depending on the reserved bit set  process the Packet failed.
[rfc]
RFC791
Bit 0: reserved, must be zero
RFC3514
Introduction This bit , but The scene seems different from us,we expect Keep reserved bit set is not modified when forward the linux router





Powered by blists - more mailing lists