Re: [tsvwg] OCS option in draft-ietf-tsvwg-udp-options-07

"C. M. Heard" <heard@pobox.com> Wed, 13 March 2019 03:27 UTC

Return-Path: <heard@pobox.com>
X-Original-To: tsvwg@ietfa.amsl.com
Delivered-To: tsvwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1635312E04D for <tsvwg@ietfa.amsl.com>; Tue, 12 Mar 2019 20:27:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pobox.com; domainkeys=pass (1024-bit key) header.from=heard@pobox.com header.d=pobox.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8GYibiXRNd4p for <tsvwg@ietfa.amsl.com>; Tue, 12 Mar 2019 20:27:02 -0700 (PDT)
Received: from pb-smtp21.pobox.com (pb-smtp21.pobox.com [173.228.157.53]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3158F1288AB for <tsvwg@ietf.org>; Tue, 12 Mar 2019 20:27:01 -0700 (PDT)
Received: from pb-smtp21.pobox.com (unknown [127.0.0.1]) by pb-smtp21.pobox.com (Postfix) with ESMTP id 564F2612DE for <tsvwg@ietf.org>; Tue, 12 Mar 2019 23:27:01 -0400 (EDT) (envelope-from heard@pobox.com)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=pobox.com; h=mime-version :references:in-reply-to:from:date:message-id:subject:to:cc :content-type; s=sasl; bh=Z9hEo46d6Z2DDeZ0WzpwLkI9OP8=; b=Ch6yoL dSKFUnE0W7/8Tqb0CI5MYv/bio9QyjSIiowCCZaNzCIerW6OZq6Na0JFUZEKSIbD 9/U7PLKsHYeyBX9LpsO1SpmF3HwxNXxnDT+h0s4IW87YOQf2kS3dfeIgJ8gFJWIE ICJ81BSn9wvFqJZnT/qss/3tCODk4ypT/LmP0=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=mime-version :references:in-reply-to:from:date:message-id:subject:to:cc :content-type; q=dns; s=sasl; b=PDMeQBe24Hwnt5WS+kvXjspllsBnLE5k hoPttUqK7Cc/qS2wx5XC3W/nmCW9gBZB5zxdLg+2nX/oRHFwHW8HkoL3i58njt6K p0HBLyUQthoItxn8jONOQtBrPyaVdBmny65Vzbnon1rTOsfN/kTKR94RFHrz+HZ8 ApOp0y9gckQ=
Received: from pb-smtp21.sea.icgroup.com (unknown [127.0.0.1]) by pb-smtp21.pobox.com (Postfix) with ESMTP id 4F90E612DC for <tsvwg@ietf.org>; Tue, 12 Mar 2019 23:27:01 -0400 (EDT) (envelope-from heard@pobox.com)
Received: from mail-io1-f43.google.com (unknown [209.85.166.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pb-smtp21.pobox.com (Postfix) with ESMTPSA id 9D19D612D6 for <tsvwg@ietf.org>; Tue, 12 Mar 2019 23:26:57 -0400 (EDT) (envelope-from heard@pobox.com)
Received: by mail-io1-f43.google.com with SMTP id x3so400854ior.6 for <tsvwg@ietf.org>; Tue, 12 Mar 2019 20:26:57 -0700 (PDT)
X-Gm-Message-State: APjAAAWSzTn0WX8lw1SSLmFYEh5qpKioXWZ2jiw3LiQAgD/H6ElVQAdH Tk8aKTxJghEzb7SdlxInKi42Dc8dkSnvf8HlG60=
X-Google-Smtp-Source: APXvYqxKQuCGueFmmfUU1aLBxFM2zJUzyHJbA14BHb9SSAId2x3rUz31gdld6336Lk0DR6SZXiwB66jPXqL4Cl17c8k=
X-Received: by 2002:a5d:97c8:: with SMTP id k8mr23016799ios.267.1552447616427; Tue, 12 Mar 2019 20:26:56 -0700 (PDT)
MIME-Version: 1.0
References: <CACL_3VFg-EWCYHZ4+kYV30vjNzPs90ysAu5SCdLNb+9OPxE+3g@mail.gmail.com> <B1D19ABC-428B-42D8-AE97-BF3B967B1140@strayalpha.com> <fd5a4cd7983862c376f1db9f324f4ea1@erg.abdn.ac.uk> <b25fcf12e33d8093b0a44d88f5c9dda1@strayalpha.com> <7b02a0ff2b33f504fa3b254996251992@erg.abdn.ac.uk> <2fa0ad4d9dcd54e5b78fd1a6cf86fbca@strayalpha.com>
In-Reply-To: <2fa0ad4d9dcd54e5b78fd1a6cf86fbca@strayalpha.com>
From: "C. M. Heard" <heard@pobox.com>
Date: Tue, 12 Mar 2019 20:26:39 -0700
X-Gmail-Original-Message-ID: <CACL_3VGrFZV+4HEqVatR4QEJ2hStZutmMBXbeu5nzSQ012mn3A@mail.gmail.com>
Message-ID: <CACL_3VGrFZV+4HEqVatR4QEJ2hStZutmMBXbeu5nzSQ012mn3A@mail.gmail.com>
To: Joe Touch <touch@strayalpha.com>
Cc: Raffaele Zullo <raffaele@erg.abdn.ac.uk>, Gorry Fairhurst <gorry@erg.abdn.ac.uk>, tsvwg <tsvwg@ietf.org>
Content-Type: text/plain; charset="UTF-8"
X-Pobox-Relay-ID: DB54E7DC-453F-11E9-8D3D-EE24A11ADF13-06080547!pb-smtp21.pobox.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/GEZlJWGZR195kVV4-J3il08mjFs>
Subject: Re: [tsvwg] OCS option in draft-ietf-tsvwg-udp-options-07
X-BeenThere: tsvwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Working Group <tsvwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg/>
List-Post: <mailto:tsvwg@ietf.org>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Mar 2019 03:27:09 -0000

On Tue, Mar 12, 2019 at 4:16 PM Joe Touch <touch@strayalpha.com> wrote:
> > On 2019-03-12 16:01, Raffaele Zullo wrote:
> > OK, but what happens if UDP Length (that was 8) is increased to
> > 8 < UDP Length <= IPPayloadLength?
> > Will part of the Options area be delivered to user as a regular UDP
> > Payload?
>
> If the reassembly checksum isn't zero, this would be caught (with high
> probability) during reassembly.

If LITE+FRAG is being used, then the initial LITE option will be corrupted,
as at least one octet will be skipped. With exceedingly high probability,
the LITE option will not be processed. The remaining options won't be
found, and what is there is unlikely to be parsed. Result: the
(UDP Length - 8) octets that appear to be conventional UDP user data
will be delivered, and the trailing octets will be discarded since they
will not appear to be valid UDP options.

Reassembly won't even be invoked.

So, CS=0 does have its risks even for the length field.

Mike Heard