Page MenuHomeFreeBSD
Differential D19967

Don't overwrite buffer when computing checksum via IPV6_CHECKSUM
ClosedPublic
Actions

Authored by tuexen on Apr 19 2019, 4:36 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Mar 28, 3:00 PM
Unknown Object (File)
Dec 20 2023, 5:38 PM
Unknown Object (File)
Dec 20 2023, 3:07 AM
Unknown Object (File)
Nov 15 2023, 8:25 AM
Unknown Object (File)
Sep 2 2023, 7:18 AM
Unknown Object (File)
Aug 31 2023, 10:32 AM
Unknown Object (File)
Aug 4 2023, 8:29 PM
Unknown Object (File)
Jul 12 2023, 8:27 PM
View All 18 Files
Subscribers
ae
imp

Details

Reviewers
bz
jtl
emaste
thj
Commits
rS346401: Avoid a buffer overwrite in rip6_output() when computing the checksum
Summary

When computing the checksum for a packet to be sent, ensure you have enough bytes in the packet to write the checksum. The existing check was wrong (off by one error) and would result in writing one byte after the packet buffer.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

tuexen created this revision.Apr 19 2019, 4:36 PM
Herald added subscribers: ae, imp. · View Herald TranscriptApr 19 2019, 4:36 PM
Harbormaster completed remote builds in B23767: Diff 56386.Apr 19 2019, 4:36 PM
bz accepted this revision.Apr 19 2019, 4:58 PM

Can you please improve the description before committing stating that it's related to rip6_output().

This revision is now accepted and ready to land.Apr 19 2019, 4:58 PM
Closed by commit rS346401: Avoid a buffer overwrite in rip6_output() when computing the checksum (authored by tuexen). · Explain WhyApr 19 2019, 5:21 PM
This revision was automatically updated to reflect the committed changes.
tuexen added a comment.Apr 19 2019, 5:22 PM
In D19967#429234, @bz wrote:

Can you please improve the description before committing stating that it's related to rip6_output().

Done.

Revision Contents
Changeset List

PathSize
head/
sys/
netinet6/
2 lines

Diff 56391

View Options

head/sys/netinet6/raw_ip6.c

Loading...