netdev - [PATCH net 0/2] net: sched: drop ct and dst for the packets toward ingress in act

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 20 Sep 2021 06:19:20 -0400
From:   Xin Long <lucien.xin@...il.com>
To:     network dev <netdev@...r.kernel.org>, davem@...emloft.net,
        kuba@...nel.org
Cc:     Marcelo Ricardo Leitner <marcelo.leitner@...il.com>,
        Davide Caratti <dcaratti@...hat.com>,
        Hangbin Liu <liuhangbin@...il.com>
Subject: [PATCH net 0/2] net: sched: drop ct and dst for the packets toward ingress in act_mirred

With the old ct and dst carried on these packets mirred or redirrected
to ingress, it may cause these packets to be dropped on rx path. This
issue could be easily triggered when using OVS HWOL on OVN-k8s. To fix
it this patchset is to drop ct and dst for these packets, just as it
does in internal_dev_recv() in OVS module.

Xin Long (2):
  net: sched: drop ct for the packets toward ingress only in act_mirred
  net: sched: also drop dst for the packets toward ingress in act_mirred

 net/sched/act_mirred.c | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

-- 
2.27.0