From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io1-xd2c.google.com (mail-io1-xd2c.google.com [IPv6:2607:f8b0:4864:20::d2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 6A3A53B29D; Sat, 23 Jan 2021 15:05:30 -0500 (EST) Received: by mail-io1-xd2c.google.com with SMTP id h11so18443787ioh.11; Sat, 23 Jan 2021 12:05:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=8/GM31/h11MkcSPbp/Ou61kkpf/Pj/hAj/BSUHbz3Eg=; b=gINwLgmPWyzRlpTB5GzpovmILu6+HnfFcvJLbVHa2h1/ptF56BqJNixx4m2SYPPf+7 FaepYnSyZ2It0ykLLAybdkSPaneeuvpva2AVKeD2+QI8VwSoTjI4pt4Ks0kgyz9bJqUk ADO5wFMcZ7D1i4zRMbfpinZ6yyopcY+7Ce6i4b8qmVZXCt55BO2KS9Eq8z8lNpE2pD0x z88XyNhvp17W+ZoJcD+VK4rRk5XXA8nDXB5EYn89Y+bI3NrsI4uOxSWkdMlYacJYNkUH t7RcclG++2I/ARYAfOFHgqJMsUVPqzBjX+jArF0SRTk69zybszponjU3joFV42QGHuI0 7W8A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=8/GM31/h11MkcSPbp/Ou61kkpf/Pj/hAj/BSUHbz3Eg=; b=lfGzjP5NQq4SA1RlpWpHKKtQ3jR3k0kKm4PlJBrjuRfilWSueNfOa54z2fBePg48Lq hV02XE+9/4/eg/4LOfTcSC5rdrbS6ByHE8h80vioIaslCYaa3BazhTUCyX1yxRhq3bEo zSz68ex1zAN7hsVhuU/mIC7ChkaKSeiviUmQ8ea15iWKyYjIvxC8b5SfZs7XpMa1hNBo IHdlgalZb08oC73xcxmML5f4dnrt+cxSZpwgn7dIJ5ZDu8YdD43ZtnSJACCqQbBHbjwi S21NgDJnFsoo6A+wPt/50eSqQ5HiPDiwyiWYP7WJO34f0IxxEBb18F3mZIFZIfHOl7DG V5IQ== X-Gm-Message-State: AOAM530n8I+JRm0NOav6AuAMdt40M/Y5536KTzGJizUUyavHD1iaq8W4 KK6i0eIr1Jk2ieN9TIFr4rJ2l0RL9YV6s2OrwUE= X-Google-Smtp-Source: ABdhPJyooYA/EiuDM1FBa4E5fCG/Hh9riHVcyYWWn74akgPZG5V8Yyg+Zn1B17ywfQLtMo0K9TySDRC5lKIEQm2gRw4= X-Received: by 2002:a5d:97d3:: with SMTP id k19mr587582ios.102.1611432329864; Sat, 23 Jan 2021 12:05:29 -0800 (PST) MIME-Version: 1.0 References: <87turceco5.fsf@toke.dk> <557C22F5-BF2E-478A-8C48-BE52F9C75256@jonathanfoulkes.com> <875z3o65c9.fsf@toke.dk> <626C02F8-C761-44B1-A5B0-0B55B564BC94@gmx.de> In-Reply-To: From: Etienne Champetier Date: Sat, 23 Jan 2021 15:04:53 -0500 Message-ID: To: Jonathan Foulkes Cc: Sebastian Moeller , cerowrt-devel@lists.bufferbloat.net, Y via Bloat Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Mon, 25 Jan 2021 06:42:02 -0500 Subject: Re: [Bloat] [Cerowrt-devel] New OpenWrt release fixing several dnsmasq CVEs X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jan 2021 20:05:30 -0000 Hi Jonathan, Le sam. 23 janv. 2021 =C3=A0 11:29, Jonathan Foulkes a =C3=A9crit : > > Hi Seb, someone did just that and even better, compared two builds with t= he dnsmasq being the only variable, and did not see any differences: > https://forum.openwrt.org/t/security-advisory-2021-01-19-1-dnsmasq-multip= le-vulnerabilities/85903/85 > > From other comments, looks like they found the bug and are testing the fi= x. > https://git.openwrt.org/?p=3Dopenwrt/staging/ldir.git;a=3Dcommitdiff;h=3D= 9a18346676850646764072ffcfd32ad9396d95c3 > > Jonathan > > > On Jan 22, 2021, at 4:40 PM, Sebastian Moeller wrote: > > > > Could you try to run top or htop and look at the CPU load? I could imag= ine that the fixes dnsmasq might have some CPU spikes that simply leave not= enough cycles for the traffic shaper? Is it possible you had a tab open on the Luci status page ? In my experience if you don't have uhttpd-mod-ubus (and maybe uhttpd-mod-lua) load average just keep climbing when you are looking at this page. https://bugs.openwrt.org/index.php?do=3Ddetails&task_id=3D2613 Best Etienne