Page MenuHomeFreeBSD

pf: Fix IP checksum on reassembly
ClosedPublic

Authored by kp on Apr 28 2021, 12:58 PM.
Tags
None
Referenced Files
F168705935: D30026.id88313.diff
Sat, Aug 29, 5:53 PM
Unknown Object (File)
Fri, Aug 28, 12:34 PM
Unknown Object (File)
Wed, Aug 26, 6:17 PM
Unknown Object (File)
Wed, Aug 26, 5:40 AM
Unknown Object (File)
Tue, Aug 25, 11:43 PM
Unknown Object (File)
Tue, Aug 25, 6:56 PM
Unknown Object (File)
Mon, Aug 24, 9:37 AM
Unknown Object (File)
Sat, Aug 22, 9:50 AM

Details

Summary

If we reassemble a packet we modify the IP header (to set the length and
remove the fragment offset information), but we failed to update the
checksum. On certain setups (mostly where we did not re-fragment again
afterwards) this could lead to us sending out packets with incorrect
checksums.

PR: 255432
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable