Page MenuHomeFreeBSD

Improve checksum computation via IPV6_CHECKSUM for received packets
ClosedPublic

Authored by tuexen on Apr 19 2019, 4:42 PM.

Details

Summary

When computing the checksum for a received packet, ensure that you have enough bytes in the packet such that it contains the checksum. This fixes in particular syzbot, which was injecting an empty (plen = 0) packet, which resulted in a panic.

Diff Detail

Repository
rS FreeBSD src repository
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Event Timeline

tuexen created this revision.Apr 19 2019, 4:42 PM
bz accepted this revision.Apr 19 2019, 5:06 PM

Again can you please mention "... in rip6_input() ..." in the commit message.

This revision is now accepted and ready to land.Apr 19 2019, 5:06 PM
This revision was automatically updated to reflect the committed changes.