Re: [PATCH net IPv6]: Fix maximum IPv6 address limit violation

2014-04-05 Thread Balakumaran Kannan
Hi Hannes, >> Kernel doesn't check with max IPv6 address limit before adding IPv6 temporary >> address. >> >> Security fix CVE-2013-0343 removes max_addresses check from >> ipv6_create_tempaddr >> function as this is handled before in addrconf_prefix_rcv function. But >> addrconf_prefix_rcv does

[PATCH net IPv6]: Fix maximum IPv6 address limit violation

2014-04-05 Thread Balakumaran Kannan
h new prefix the machine will have (max_addresses + 1) number of IPv6 addresses. So it is better to use a new prefix only if two IPv6 address slots available in case IPv6 privacy extension is enabled. Severity: Less Signed-off-by: Balakumaran Kannan --- How to reproduce: 1. Enable IPv6 pr