netdev - Fw: [Bug 215674] New: ip_compute_csum computes illegal zero checksum, should return ffff in such a case

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20220311091223.477970e6@hermes.local>
Date:   Fri, 11 Mar 2022 09:12:23 -0800
From:   Stephen Hemminger <stephen@...workplumber.org>
To:     netdev@...r.kernel.org
Subject: Fw: [Bug 215674] New: ip_compute_csum computes illegal zero
 checksum, should return ffff in such a case

There are not of uses of ip_compute_csum.

Begin forwarded message:

Date: Fri, 11 Mar 2022 11:47:49 +0000
From: bugzilla-daemon@...nel.org
To: stephen@...workplumber.org
Subject: [Bug 215674] New: ip_compute_csum computes illegal zero checksum, should return ffff in such a case

https://bugzilla.kernel.org/show_bug.cgi?id=215674

            Bug ID: 215674
           Summary: ip_compute_csum computes illegal zero checksum, should
                    return ffff in such a case
           Product: Networking
           Version: 2.5
    Kernel Version: 4.14.268
          Hardware: All
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Other
          Assignee: stephen@...workplumber.org
          Reporter: eyal.lotem@...il.com
        Regression: No

A 0 checksum indicates the checksum is to not be validated, and an 0xffff
checksum indicates a zero result.

If the sum is computed to be 0, it should be substituted for 0xffff, to
indicate the actual zero checksum.

This bug went unnoticed for a long time, because in 2^-16 of computed
checksums, the incorrect result merely foregoes checksum validation, which is
likely to not trigger any noticeable errors.

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are the assignee for the bug.