From mboxrd@z Thu Jan 1 00:00:00 1970 From: Shan Wei Subject: Re: [PATCH v2] IPv6: fix bug when specifying the non-exist outgoing interface Date: Tue, 03 Jun 2008 15:03:12 +0800 Message-ID: <4844ECB0.2020407@cn.fujitsu.com> References: <20080603.014819.38527291.yoshfuji@linux-ipv6.org> <20080603.020734.75959629.yoshfuji@linux-ipv6.org> <4844303E.1040104@hp.com> <20080603.135249.31016680.yoshfuji@linux-ipv6.org> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Cc: brian.haley@hp.com, davem@davemloft.net, netdev@vger.kernel.org To: =?ISO-2022-JP?B?WU9TSElGVUpJIEhpZGVha2kgLyAbJEI1SEYjMVFMQBsoQg==?= Return-path: Received: from cn.fujitsu.com ([222.73.24.84]:60160 "EHLO song.cn.fujitsu.com" rhost-flags-OK-FAIL-OK-OK) by vger.kernel.org with ESMTP id S1750860AbYFCHEj (ORCPT ); Tue, 3 Jun 2008 03:04:39 -0400 In-Reply-To: <20080603.135249.31016680.yoshfuji@linux-ipv6.org> Sender: netdev-owner@vger.kernel.org List-ID: YOSHIFUJI Hideaki / 吉藤英明 写道: > In article <4844303E.1040104@hp.com> (at Mon, 02 Jun 2008 13:39:10 -0400), Brian Haley says: > >> YOSHIFUJI Hideaki / 吉藤英明 wrote: >>> - if (addr_type == IPV6_ADDR_ANY) >>> + addr_type = ipv6_addr_type(&src_info->ipi6_addr); >>> + if (addr_type == IPV6_ADDR_ANY || >>> + addr_type & IPV6_ADDR_MULTICAST) { >>> + if (dev) >>> + dev_put(dev); >>> break; >> What about link-local multicast? We should check ifindex there too. I >> think that check should just be for IPV6_ADDR_ANY. I think making this >> more like inet6_bind() and not doing the ipv6_chk_addr() call for >> Multicast would be the best thing, right? > > My brain was sleeping. I intended to check if the source > address is NOT an multicast, but I think we can let ipv6_chk_addr() > check it. > RFC3542 6.2 says: the kernel must verify that the requested source address is indeed a unicast address. If a multicast address is specified, what should kernel do ? returns error or choose source address by itself. > BTW we do not check if the address is valid unicast when we assign new > address on interface. That does not seem good to me... > (but (some?) BSDs do not seem to check this, hmm...) > > --- > diff --git a/net/ipv6/datagram.c b/net/ipv6/datagram.c > index 94fa6ae..f55269a 100644 > --- a/net/ipv6/datagram.c > +++ b/net/ipv6/datagram.c > @@ -509,7 +509,6 @@ int datagram_send_ctl(struct msghdr *msg, struct flowi *fl, > > for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) { > int addr_type; > - struct net_device *dev = NULL; > > if (!CMSG_OK(msg, cmsg)) { > err = -EINVAL; > @@ -522,6 +521,9 @@ int datagram_send_ctl(struct msghdr *msg, struct flowi *fl, > switch (cmsg->cmsg_type) { > case IPV6_PKTINFO: > case IPV6_2292PKTINFO: > + { > + struct net_device *dev = NULL; > + > if (cmsg->cmsg_len < CMSG_LEN(sizeof(struct in6_pktinfo))) { > err = -EINVAL; > goto exit_f; > @@ -535,32 +537,34 @@ int datagram_send_ctl(struct msghdr *msg, struct flowi *fl, > fl->oif = src_info->ipi6_ifindex; > } > > - addr_type = ipv6_addr_type(&src_info->ipi6_addr); > + if (fl->oif) { > + dev = dev_get_by_index(&init_net, fl->oif); > + if (!dev) > + return -ENODEV; > + } > > - if (addr_type == IPV6_ADDR_ANY) > + addr_type = ipv6_addr_type(&src_info->ipi6_addr); > + if (addr_type == IPV6_ADDR_ANY) { > + if (dev) > + dev_put(dev); > break; > - > - if (addr_type & IPV6_ADDR_LINKLOCAL) { > - if (!src_info->ipi6_ifindex) > - return -EINVAL; > - else { > - dev = dev_get_by_index(&init_net, src_info->ipi6_ifindex); > - if (!dev) > - return -ENODEV; > - } > } > + > if (!ipv6_chk_addr(&init_net, &src_info->ipi6_addr, > - dev, 0)) { > + addr_type & IPV6_ADDR_LINKLOCAL ? dev : NULL, if oif==0 and address is link-local. now it does well,not returns EINVAL. > + 0)) { > if (dev) > dev_put(dev); > err = -EINVAL; > goto exit_f; > } > + > if (dev) > dev_put(dev); > > ipv6_addr_copy(&fl->fl6_src, &src_info->ipi6_addr); > break; > + } > > case IPV6_FLOWINFO: > if (cmsg->cmsg_len < CMSG_LEN(4)) { > > --yoshfuji > > > -- Regards 単 衛 -------------------------------------------------- Shan Wei Development Dept.I Nanjing Fujitsu Nanda Software Tech. Co., Ltd.(FNST) 8/F., Civil Defense Building, No.189 Guangzhou Road, Nanjing, 210029, China TEL:+86+25-86630566-836 FUJITSU INTERNAL:79955-836 FAX:+86+25-83317685 Mail:shanwei@cn.fujitsu.com -------------------------------------------------- This communication is for use by the intended recipient(s) only and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not an intended recipient of this communication, you are hereby notified that any dissemination, distribution or copying hereof is strictly prohibited. If you have received this communication in error, please notify me by reply e-mail, permanently delete this communication from your system, and destroy any hard copies you may have printed.