Hi All,
I apologize for the delay, my lab was reserved for some other uses. But we am going to run the full TAHI IPv6 test suite against this patch on Tue, and I will reply with the results.
Thanks Peter and Google team for the patch!
--John Masinter
On Mon, Apr 8, 2019 at 6:10 PM Peter Oskolkov posk@google.com wrote:
Currently, 4.19 and earlier stable kernels contain a security fix that is not fully IPv6 standard compliant.
This patchset backports IPv6 defrag fixes from 5.1rc that restore standard-compliance.
Original 5.1 patchet: https://patchwork.ozlabs.org/cover/1029418/
John Masinter (captwiggum), could you, please, confirm that this patchset fixes TAHI tests?
Peter Oskolkov (3): net: IP defrag: encapsulate rbtree defrag code into callable functions net: IP6 defrag: use rbtrees for IPv6 defrag net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
include/net/inet_frag.h | 16 +- include/net/ipv6_frag.h | 11 +- net/ipv4/inet_fragment.c | 293 ++++++++++++++++++++++++ net/ipv4/ip_fragment.c | 290 +++-------------------- net/ipv6/netfilter/nf_conntrack_reasm.c | 260 ++++++--------------- net/ipv6/reassembly.c | 233 +++++-------------- 6 files changed, 477 insertions(+), 626 deletions(-)
-- 2.21.0.392.gf8f6787159e-goog