OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: HiFn 7955 makes OpenSSH fail

From: Mike Tancsa (mikesentex.net)
Date: Tue Aug 03 2004 - 23:11:37 CDT


At 11:46 PM 03/08/2004, Damien Miller wrote:
>I haven't been able to reproduce this on either:
>
>- a Soekris Net4501 w/ vpn1401 PCI card
>- a Pentium3 with a full-size 7955 card
>
>So these problems may be peculiar to the the net4801, the mini-pci
>vpn1411 or the combination of the two together. There has been some
>talk on the soekris-tech mailing list (see attached) that may be
>relevant.

On FreeBSD at least (I will repeat the tests with OpenBSD tomorrow however
there is much in common with the driver),

I am just doing a few more tests to make certain, but running
/usr/bin/openssl aes-128-cbc -in big -k pass | ssh -c aes128-cbc
mdtancsa192.168.43.26 "cat - > /home/mdtancsa/targetfile.enc"
on a file that was ~ .5GB would choke on a unpatched system with the

hifn0 mem 0xf3000000-0xf3007fff,0xf3800000-0xf3801fff,0xf4000000-0xf4000fff
irq 12 at device 12.0 on pci2
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
hifn0pci2:12:0: class=0x0b4000 card=0x00000000 chip=0x002013a3
rev=0x00 hdr=0x00

card....

But running on RELENG_4 with

--- hifn7751.c Wed Oct 8 19:52:00 2003
+++ hifn7751.c.new Tue Aug 3 21:03:38 2004
-1916,10 +1916,9
          * interrupt salvages us from), unless there is more than one command
          * in the queue.
          */
- if (dma->cmdu > 1) {
- sc->sc_dmaier |= HIFN_DMAIER_C_WAIT;
- WRITE_REG_1(sc, HIFN_1_DMA_IER, sc->sc_dmaier);
- }
+/* sc->sc_dmaier |= HIFN_DMAIER_C_WAIT;
+ WRITE_REG_1(sc, HIFN_1_DMA_IER, sc->sc_dmaier);
+*/

         hifnstats.hst_ipackets++;
         hifnstats.hst_ibytes += cmd->src_mapsize;

Has allowed me to do run 11 times without fail... I will test some more
tomorrow on a stock 3.5 machine.

         ---Mike