Page MenuHomeFreeBSD

Fix KASSERT in tcp_output()
ClosedPublic

Authored by tuexen on Mar 23 2019, 6:55 AM.
Tags
None
Referenced Files
Unknown Object (File)
Dec 20 2023, 6:54 AM
Unknown Object (File)
Dec 11 2023, 7:48 PM
Unknown Object (File)
Dec 1 2023, 10:52 AM
Unknown Object (File)
Aug 16 2023, 10:32 AM
Unknown Object (File)
Jun 26 2023, 11:09 PM
Unknown Object (File)
Jun 15 2023, 7:11 PM
Unknown Object (File)
Jun 13 2023, 10:46 PM
Unknown Object (File)
Jan 2 2023, 11:29 PM
Subscribers

Details

Reviewers
rrs
bz
Group Reviewers
transport
Summary

When checking the length of the headers at this point, the IP level options have not been added to the mbuf chain. So don't take them into account.

This issue was reported by

  • syzbot+16025fff7ee5f7c5957b@syzkaller.appspotmail.com
  • syzbot+adb5836b8a9ff621b2aa@syzkaller.appspotmail.com
  • syzbot+d25a5352bcdf40acdbb8@syzkaller.appspotmail.com
Test Plan

Run the attached packetdrill script:

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 23261