pf tests: improved test for CVE-2019-5598
ClosedPublic
Actions

Authored by kp on Sep 7 2024, 9:33 AM.

Tags

None

Referenced Files

	F166275447: D46573.id143248.diff
	Wed, Aug 12, 4:04 PM

	F166269794: D46573.id143248.diff
	Wed, Aug 12, 3:33 PM

	Unknown Object (File)
	Mon, Aug 10, 8:46 PM

	Unknown Object (File)
	Sat, Aug 8, 11:16 PM

	Unknown Object (File)
	Sat, Aug 8, 9:38 AM

	Unknown Object (File)
	Fri, Aug 7, 6:26 PM

	Unknown Object (File)
	Tue, Aug 4, 8:05 PM

	Unknown Object (File)
	Tue, Jul 28, 7:30 AM

Subscribers

vegeta_tuxpowered.net

Details

Reviewers

None

Group Reviewers

network
pfsense

Commits

rGb27d3f71c2ad: pf tests: improved test for CVE-2019-5598

Summary

Ensure that we verify that the inner and outer IP address matches for ICMP error
messages. This is a more detailed test for CVE-2019-5598, which was fixed back
in 2019.

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Sep 7 2024, 9:33 AM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSep 7 2024, 9:33 AM

kp requested review of this revision.Sep 7 2024, 9:33 AM

Harbormaster completed remote builds in B59361: Diff 143069.Sep 7 2024, 9:33 AM

kp added a parent revision: D46572: opencrypto: assert that mbufs are writable.Sep 7 2024, 9:33 AM

kp added a child revision: D46574: pf: fix debug printf.

This revision was not accepted when it landed; it landed in state Needs Review.Sep 11 2024, 11:18 AM

Closed by commit rGb27d3f71c2ad: pf tests: improved test for CVE-2019-5598 (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rGb27d3f71c2ad: pf tests: improved test for CVE-2019-5598.

Revision Contents
Changeset List

Path

Size

tests/

sys/

netpfil/

pf/

Makefile

1 line

icmp.py

126 lines

Diff 143248

View Options

tests/sys/netpfil/pf/Makefile