netdev - Re: [PATCHv3 net] ipv6: do not match device when remove source route

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 24 Jul 2023 17:42:34 +0800
From: Hangbin Liu <liuhangbin@...il.com>
To: Ido Schimmel <idosch@...sch.org>
Cc: netdev@...r.kernel.org, "David S . Miller" <davem@...emloft.net>,
	David Ahern <dsahern@...nel.org>,
	Eric Dumazet <edumazet@...gle.com>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	Thomas Haller <thaller@...hat.com>
Subject: Re: [PATCHv3 net] ipv6: do not match device when remove source route

On Sun, Jul 23, 2023 at 11:13:36AM +0300, Ido Schimmel wrote:
> > BTW, to fix it, how about check if the IPv6 addr still exist. e.g.
> > 
> > --- a/net/ipv6/route.c
> > +++ b/net/ipv6/route.c
> > @@ -4590,10 +4590,11 @@ static int fib6_remove_prefsrc(struct fib6_info *rt, void *arg)
> >         struct net_device *dev = ((struct arg_dev_net_ip *)arg)->dev;
> >         struct net *net = ((struct arg_dev_net_ip *)arg)->net;
> >         struct in6_addr *addr = ((struct arg_dev_net_ip *)arg)->addr;
> > +       u32 tb6_id = l3mdev_fib_table(dev) ? : RT_TABLE_MAIN;
> > 
> > -       if (!rt->nh &&
> > -           ((void *)rt->fib6_nh->fib_nh_dev == dev || !dev) &&
> > -           rt != net->ipv6.fib6_null_entry &&
> > +       if (rt != net->ipv6.fib6_null_entry &&
> > +           rt->fib6_table->tb6_id == tb6_id &&
> > +           !ipv6_chk_addr_and_flags(net, addr, NULL, true, 0, IFA_F_TENTATIVE) &&
> >             ipv6_addr_equal(addr, &rt->fib6_prefsrc.addr)) {
> 
> ipv6_chk_addr_and_flags() is more expensive than ipv6_addr_equal() so
> better to first check that route indeed uses the address as the
> preferred source address and only then check if it exists.

OK.
> 
> Maybe you can even do it in rt6_remove_prefsrc(). That would be similar
> to what IPv4 is doing.

Do you mean call ipv6_chk_addr_and_flags() in rt6_remove_prefsrc()?

Thanks
Hangbin