drop-fragmented-ndisc-packets-assembled-in-netfilter

### 环境信息
            
【OS版本】openEuler-20.03-LTS-SP4
【内核版本】4.19.90-2506.4.0.0333
【硬件平台】无关
【组网信息】无关

### 缺陷信息
            
**【问题复现步骤】**： 在测试IPv6协议一致性时，发现内核存在两个IPv6协议一致性问题

**问题** 错误响应带有分片扩展头的ND报文

- 下图是一个NS报文，携带了分片扩展头，不符合RFC6980规范，设备收到此类报文应该静默丢弃，但是内核回复了该报文并且学习到了对端的地址。(此处仅展示了NS报文，若是NA报文携带了分片扩展头，内核处理同样有此问题。)![输入图片说明](https://foruda.gitee.com/images/1766628634542888096/53687f1b_5492003.png "屏幕截图")
- 下图是TAHI测试套件给出的信息：
![输入图片说明](https://foruda.gitee.com/images/1766628640969748865/b439aad0_5492003.png "屏幕截图")
- 查看内核提交记录，在5.10.y版本里面找到了对应修复记录，以下是commit链接：
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=68f9f9c2c3b6a7259f6a92bc26cdc7bd22e7a982
问题报文原文如上图，TAHI测试套件对应用例脚本：

TAHI测试套件对应用例脚本：
//
// Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010
// Yokogawa Electric Corporation.
// All rights reserved.
// 
// Redistribution and use of this software in source and binary
// forms, with or without modification, are permitted provided that
// the following conditions and disclaimer are agreed and accepted
// by the user:
// 
// 1. Redistributions of source code must retain the above copyright
//    notice, this list of conditions and the following disclaimer.
// 
// 2. Redistributions in binary form must reproduce the above copyright
//    notice, this list of conditions and the following disclaimer in
//    the documentation and/or other materials provided with
//    the distribution.
// 
// 3. Neither the names of the copyrighters, the name of the project
//    which is related to this software (hereinafter referred to as
//    "project") nor the names of the contributors may be used to
//    endorse or promote products derived from this software without
//    specific prior written permission.
// 
// 4. No merchantable use may be permitted without prior written
//    notification to the copyrighters.
// 
// 5. The copyrighters, the project and the contributors may prohibit
//    the use of this software at any time.
// 
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHTERS, THE PROJECT AND
// CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING
// BUT NOT LIMITED THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
// FOR A PARTICULAR PURPOSE, ARE DISCLAIMED.  IN NO EVENT SHALL THE
// COPYRIGHTERS, THE PROJECT OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
// INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
// (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
// SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
// HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
// STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
// IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
// POSSIBILITY OF SUCH DAMAGE.
//
// $TAHI: ct/nd.p2/V6LC_2_1_1_A.def,v 1.3 2005/04/25 07:08:03 akisada Exp $
//
////////////////////////////////////////////////////////////////

#include "./ndisc.def"

#ifndef	FRAG_ID
#define	FRAG_ID	0x00000100
#endif

FEM_icmp6_ns(
	ndisc_atomic_ns,
	_HETHER_tn2nut,
	{
		HopLimit	= 255;
		_SRC(tnv6());
		_DST(nut3v6());
	},
	{
		TargetAddress	= nut3v6();
		option		= _SLLOPT_tn;
	}

)

FEM_hdr_ipv6_exth(
	ndisc_atomic_ns_all,
	_HETHER_tn2nut,
	{
		_SRC(tnv6());
		_DST(nut3v6());
		HopLimit = 255;
	},
	{
		header = _HDR_IPV6_NAME(ndisc_atomic_ns_all);
		exthdr = frag_all;
		upper = payload_all;
	}
)

Hdr_Fragment frag_all {
	NextHeader = 58;
	FragmentOffset = 0;
	MFlag = 0;
	Identification = FRAG_ID;
}

Payload payload_all {
	data = right(_PACKET_IPV6_NAME(ndisc_atomic_ns), 40);
}

`

GVP openEuler / kernel
关闭

内容风险标识

评论 (1)

GVPopenEuler / kernel关闭

内容风险标识