Re: [PATCH v4 net] net: ipv6: regenerate host route if moved to gc list

2017-04-25 Thread David Miller
From: David Ahern Date: Tue, 25 Apr 2017 09:17:29 -0700 > Taking down the loopback device wreaks havoc on IPv6 routing. By > extension, taking down a VRF device wreaks havoc on its table. > > Dmitry and Andrey both reported heap out-of-bounds reports in the IPv6 > FIB code while running syzkalle

Re: [PATCH v4 net] net: ipv6: regenerate host route if moved to gc list

2017-04-25 Thread Eric Dumazet
On Tue, 2017-04-25 at 09:17 -0700, David Ahern wrote: > Taking down the loopback device wreaks havoc on IPv6 routing. By > extension, taking down a VRF device wreaks havoc on its table. > > Dmitry and Andrey both reported heap out-of-bounds reports in the IPv6 > FIB code while running syzkaller fu

Re: [PATCH v4 net] net: ipv6: regenerate host route if moved to gc list

2017-04-25 Thread Martin KaFai Lau
On Tue, Apr 25, 2017 at 09:17:29AM -0700, David Ahern wrote: [...] > > All of those faults are fixed by regenerating the host route if the > existing one has been moved to the gc list, something that can be > determined by checking if the rt6i_ref counter is 0. Acked-by: Martin KaFai Lau > > Fixe

[PATCH v4 net] net: ipv6: regenerate host route if moved to gc list

2017-04-25 Thread David Ahern
Taking down the loopback device wreaks havoc on IPv6 routing. By extension, taking down a VRF device wreaks havoc on its table. Dmitry and Andrey both reported heap out-of-bounds reports in the IPv6 FIB code while running syzkaller fuzzer. The root cause is a dead dst that is on the garbage list g