netdev - Re: IPA monitor (Final RFC)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 2 Feb 2022 01:19:34 +0100
From:   Andrew Lunn <andrew@...n.ch>
To:     Alex Elder <elder@...aro.org>
Cc:     Jakub Kicinski <kuba@...nel.org>,
        Network Development <netdev@...r.kernel.org>,
        "bjorn.andersson@...aro.org" <bjorn.andersson@...aro.org>,
        Florian Fainelli <f.fainelli@...il.com>
Subject: Re: IPA monitor (Final RFC)

Hi Alex

This looks good in general.

>     - If any monitor packet received from hardware is bad, it--along
> 
>       with everything beyond it in its page--will be discarded.
> 
>         - The received data must be big enough to hold a status
> 
>           header.
> 
>         - The received data must contain the packet data, meaning
> 
>           packet length in the status header lies within range.

So bad in just the sense that capturing the packet and passing it to
the application processor somehow went wrong.

What about packets with bad CRC? Since the application processor is
not involved, i assume something in the APA architecture is validating
L2 and L3 CRCs. Do they get dropped, or can they be seen in the
monitor stream? Does the header contain any indication of CRC errors,
since if the packet has been truncated, it won't be possible to
validate them. And you said L2 headers are not present anyway.

Do you look at various libpcap-ng implementations? Since this is
debugfs you are not defining a stable ABI, you can change it any time
you want and break userspace. But maybe there could be small changes
in the API which make it easier to feed to wireshark via libpcap.

	Andrew