Page MenuHomeFreeBSD

pf tests: Verify (tcp) checksum modification on unaligned options
AbandonedPublic

Authored by kp on Dec 20 2020, 3:02 PM.

Details

Summary

It turns out pf incorrectly updates the TCP checksum if the TCP option
we're modifying is not 2-byte algined with respect to the start of the
packet.

Create a TCP packet with such an option and throw it through a scrub
rule, which will update timestamps and modify the packet.

PR: 240416

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint OK
Unit
No Unit Test Coverage
Build Status
Buildable 35584
Build 32484: arc lint + arc unit