Wind River Support Network

HomeDefectsLIN1023-980
Fixed

LIN1023-980 : [LTP]nxp-imx6: icmp_rate_limit01 fails

Created: Jun 19, 2023    Updated: Mar 27, 2024
Resolved Date: Mar 27, 2024
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

Build LTP into the image run icmp_rate_limit01 via runltp -f syscalls -s chdir01

setup.sh --machines nxp-imx6 --templates feature/docker feature/kdump feature/kexec --distro wrlinux --dl-layers=1 --accept-eula=yes
echo 'PREFERRED_PROVIDER_virtual/kernel = "linux-yocto-rt"' >> conf/local.conf
echo 'IMAGE_INSTALL:append = " ltp"' >> conf/local.conf
 bitbake wrlinux-image-std


tag=cve-2020-25705 stime=1677838887
cmdline="icmp_rate_limit01"
contacts=""
analysis=exit
<<<test_output>>>
tst_kconfig.c:87: TINFO: Parsing kernel config '/proc/config.gz'
tst_test.c:1558: TINFO: Timeout per run is 0h 00m 30s
IPv6: ADDRCONF(NETDEV_CHANGE): ltp_veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): ltp_veth2: link becomes ready
icmp_rate_limit01.c:222: TINFO: Batch 0: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 1: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 2: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 3: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 4: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 5: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 6: Got 100 ICMP errors
icmp_rate_limit01.c:226: TINFO: Batch 7: Got 100 ICMP errors
icmp_rate_limit01.c:230: TFAIL: ICMP rate limit not randomized, system is vulnerable

HINT: You _MAY_ be missing kernel fixes:

https://git.kernel.org/puLTP: starting cve-2020-29373 (io_uring02)
b/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b38e7819cae9

HINT: You _MAY_ be vulnerable to CVE(s):

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25705

Summary:
passed   0
failed   1
broken   0
skipped  0
warnings 0
<<<execution_status>>>

Steps to Reproduce

/lpg-build/cdc/fast_prod/WRL10_23/WRL10_23_GIT/wrlinux-10/setup.sh --machines nxp-imx6 --templates feature/docker feature/kdump feature/kexec --distro wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build
echo 'PREFERRED_PROVIDER_virtual/kernel = "linux-yocto-rt"' >> conf/local.conf
bitbake-layers add-layer /lpg-build/cdc/WASSP_LINUX_1023/testcases/wrlinux/wr-testing/bts-dev
echo 'require templates/feature/bts/template.conf' >> conf/local.conf
bitbake wrlinux-image-std

share image:
http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS23/LTP/nxp-imx6_preempt-rt_glibc-std/20230530_135844/

./runltp -f syscalls -s chdir01
Live chat
Online