genode/tool/autopilot.list
Martin Stein 619474bc90 nic_router: drop fragmented IPv4
The NIC router used to ignore the IPv4 header fields "More fragments" and
"Fragment offset" completely. Therefore higher-level protocols of fragmented
IPv4 were interpreted wrong because each fragment was considered a self-
standing packet, expecting, for instance UDP/TCP headers somewhere inside of
the UDP/TCP data field. Normally, such packets were dropped as soon as the
UDP/TCP checksum check failed because of the misinterpretation. However,
it was also possible for fragmented IPv4 to pass the router although normally
only partially.

IPv4 fragmentation support in the router would introduce some potential
security risks and is presumably not an easy endeavor. So, for now, we settled
on not supporting IPv4 fragmentation. With this commit, the router simply drops
all fragmented IPv4. This is reflected to the log for each fragment as "drop
packet (fragmented IPv4 not supported)" when 'verbose_packet_drop="yes"' is
configured.

The new test 'run/nic_router_ipv4_fragm' is an automated test for this
behavior. The test is added to the autopilot list.

Ref #4236
2021-08-18 15:06:12 +02:00

97 lines
1.3 KiB
Plaintext

aes_cbc_4k
bomb
cbe_tester
cpu_bench
cpu_balancer
cpu_quota
cpu_sampler
demo
depot_autopilot
depot_download
depot_query
extract
fb_bench
fetchurl_lwip
fetchurl_lxip
fs_query
gdb_monitor
ieee754
init_smp
event_filter
libc_integration
libc_vfs_fs_ext2
libc_vfs_fs_fat
log_core
lwip
lx_hybrid_ctors
lx_hybrid_exception
lx_hybrid_pthread_ipc
lx_fs_import
microcode
migrate
moon
netperf_lwip
netperf_lwip_bridge
netperf_lwip_usb
netperf_lwip_wifi
netperf_lxip
netperf_lxip_bridge
netperf_lxip_usb
netperf_lxip_wifi
nic_bridge
nic_bridge_stress
nic_dump
nic_router
nic_router_ipv4_fragm
nic_router_disable_arp
nic_router_dhcp_managed
nic_router_dhcp_unmanaged
nic_router_flood
nic_router_stress
nic_router_uplinks
tool_chain_auto
nvme
ping
ping_nic_router
platform
rtc
rump_ext2
sd_card_bench
seoul-auto
ssh_exec_channel
smartcard
smbios_decoder
smp
sntp_client
sub_rm
tar_rom
thread
timeout
timeout_smp
timer_accuracy
tz_vmm
usb_hid_raw
usb_hid_reconnect
vbox5_genode_usb_hid_raw
vbox5_ubuntu_16_04_32
vbox5_ubuntu_16_04_64
vbox5_vm_ubuntu_16_04_32
vbox5_vm_ubuntu_16_04_64
vbox5_vm_win10_64
vbox5_vm_win7_32
vbox5_vm_win7_64
vbox5_win10_64
vbox5_win7_32
vbox5_win7_64
vbox5_win7_64_multiple
vbox5_win7_64_raw
vbox5_win7_64_share
vm_stress_vbox5-debian32
vm_stress_vbox5-debian64
vm_stress_seoul-debian32
verify
vfs_cfg
vfs_import
vmm_arm
vmm_x86