Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

mptcp: fix length of ADD_ADDR with port sub-option

in current Linux, MPTCP peers advertising endpoints with port numbers use
a sub-option length that wrongly accounts for the trailing TCP NOP. Also,
receivers will only process incoming ADD_ADDR with port having such wrong
sub-option length. Fix this, making ADD_ADDR compliant to RFC8684 §3.4.1.

this can be verified running tcpdump on the kselftests artifacts:

unpatched kernel:
[root@bottarga mptcp]# tcpdump -tnnr unpatched.pcap | grep add-addr
reading from file unpatched.pcap, link-type LINUX_SLL (Linux cooked v1), snapshot length 65535
IP 10.0.1.1.10000 > 10.0.1.2.53078: Flags [.], ack 101, win 509, options [nop,nop,TS val 214459678 ecr 521312851,mptcp add-addr v1 id 1 a00:201:2774:2d88:7436:85c3:17fd:101], length 0
IP 10.0.1.2.53078 > 10.0.1.1.10000: Flags [.], ack 101, win 502, options [nop,nop,TS val 521312852 ecr 214459678,mptcp add-addr[bad opt]]

patched kernel:
[root@bottarga mptcp]# tcpdump -tnnr patched.pcap | grep add-addr
reading from file patched.pcap, link-type LINUX_SLL (Linux cooked v1), snapshot length 65535
IP 10.0.1.1.10000 > 10.0.1.2.38178: Flags [.], ack 101, win 509, options [nop,nop,TS val 3728873902 ecr 2732713192,mptcp add-addr v1 id 1 10.0.2.1:10100 hmac 0xbccdfcbe59292a1f,nop,nop], length 0
IP 10.0.1.2.38178 > 10.0.1.1.10000: Flags [.], ack 101, win 502, options [nop,nop,TS val 2732713195 ecr 3728873902,mptcp add-addr v1-echo id 1 10.0.2.1:10100,nop,nop], length 0

Fixes: 22fb85ffaefb ("mptcp: add port support for ADD_ADDR suboption writing")
CC: stable@vger.kernel.org # 5.11+
Reviewed-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Acked-and-tested-by: Geliang Tang <geliangtang@gmail.com>
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by

Davide Caratti and committed by
David S. Miller
27ab92d9 2055a99d

+8 -6
+8 -6
net/mptcp/protocol.h
··· 52 52 #define TCPOLEN_MPTCP_DSS_MAP64 14 53 53 #define TCPOLEN_MPTCP_DSS_CHECKSUM 2 54 54 #define TCPOLEN_MPTCP_ADD_ADDR 16 55 - #define TCPOLEN_MPTCP_ADD_ADDR_PORT 20 55 + #define TCPOLEN_MPTCP_ADD_ADDR_PORT 18 56 56 #define TCPOLEN_MPTCP_ADD_ADDR_BASE 8 57 - #define TCPOLEN_MPTCP_ADD_ADDR_BASE_PORT 12 57 + #define TCPOLEN_MPTCP_ADD_ADDR_BASE_PORT 10 58 58 #define TCPOLEN_MPTCP_ADD_ADDR6 28 59 - #define TCPOLEN_MPTCP_ADD_ADDR6_PORT 32 59 + #define TCPOLEN_MPTCP_ADD_ADDR6_PORT 30 60 60 #define TCPOLEN_MPTCP_ADD_ADDR6_BASE 20 61 - #define TCPOLEN_MPTCP_ADD_ADDR6_BASE_PORT 24 62 - #define TCPOLEN_MPTCP_PORT_LEN 4 61 + #define TCPOLEN_MPTCP_ADD_ADDR6_BASE_PORT 22 62 + #define TCPOLEN_MPTCP_PORT_LEN 2 63 + #define TCPOLEN_MPTCP_PORT_ALIGN 2 63 64 #define TCPOLEN_MPTCP_RM_ADDR_BASE 4 64 65 #define TCPOLEN_MPTCP_PRIO 3 65 66 #define TCPOLEN_MPTCP_PRIO_ALIGN 4 ··· 702 701 len = TCPOLEN_MPTCP_ADD_ADDR6_BASE; 703 702 if (!echo) 704 703 len += MPTCPOPT_THMAC_LEN; 704 + /* account for 2 trailing 'nop' options */ 705 705 if (port) 706 - len += TCPOLEN_MPTCP_PORT_LEN; 706 + len += TCPOLEN_MPTCP_PORT_LEN + TCPOLEN_MPTCP_PORT_ALIGN; 707 707 708 708 return len; 709 709 }