Hi All, I apologize for the delay, my lab was reserved for some other uses. But we am going to run the full TAHI IPv6 test suite against this patch on Tue, and I will reply with the results. Thanks Peter and Google team for the patch! --John Masinter On Mon, Apr 8, 2019 at 6:10 PM Peter Oskolkov <posk@xxxxxxxxxx> wrote: > > Currently, 4.19 and earlier stable kernels contain a security fix > that is not fully IPv6 standard compliant. > > This patchset backports IPv6 defrag fixes from 5.1rc that restore > standard-compliance. > > Original 5.1 patchet: https://patchwork.ozlabs.org/cover/1029418/ > > > John Masinter (captwiggum), could you, please, confirm that this > patchset fixes TAHI tests? > > > Peter Oskolkov (3): > net: IP defrag: encapsulate rbtree defrag code into callable functions > net: IP6 defrag: use rbtrees for IPv6 defrag > net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c > > include/net/inet_frag.h | 16 +- > include/net/ipv6_frag.h | 11 +- > net/ipv4/inet_fragment.c | 293 ++++++++++++++++++++++++ > net/ipv4/ip_fragment.c | 290 +++-------------------- > net/ipv6/netfilter/nf_conntrack_reasm.c | 260 ++++++--------------- > net/ipv6/reassembly.c | 233 +++++-------------- > 6 files changed, 477 insertions(+), 626 deletions(-) > > -- > 2.21.0.392.gf8f6787159e-goog >
