netdev - [PATCH net 0/3] ipv6: Fix socket connection with DSCP fib-rules.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <cover.1675875519.git.gnault@redhat.com>
Date:   Wed, 8 Feb 2023 18:13:56 +0100
From:   Guillaume Nault <gnault@...hat.com>
To:     David Miller <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>,
        Paolo Abeni <pabeni@...hat.com>,
        Eric Dumazet <edumazet@...gle.com>
Cc:     netdev@...r.kernel.org, David Ahern <dsahern@...nel.org>,
        YOSHIFUJI Hideaki <yoshfuji@...ux-ipv6.org>
Subject: [PATCH net 0/3] ipv6: Fix socket connection with DSCP fib-rules.

The "flowlabel" field of struct flowi6 is used to store both the actual
flow label and the DS Field (or Traffic Class). However the .connect
handlers of datagram and TCP sockets don't set the DS Field part when
doing their route lookup. This breaks fib-rules that match on DSCP.

Guillaume Nault (3):
  ipv6: Fix datagram socket connect with DSCP.
  ipv6: Fix tcp socket connect with DSCP.
  selftests: fib_rule_tests: Test UDP and TCP connections with DSCP
    rules.

 net/ipv6/datagram.c                           |   2 +-
 net/ipv6/tcp_ipv6.c                           |   1 +
 tools/testing/selftests/net/fib_rule_tests.sh | 128 +++++++++++++++++-
 tools/testing/selftests/net/nettest.c         |  51 ++++++-
 4 files changed, 179 insertions(+), 3 deletions(-)

-- 
2.30.2