Page MenuHomeFreeBSD

pf: reduce IPv6 header parsing code duplication
ClosedPublic

Authored by kp on Oct 4 2024, 12:43 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Oct 8, 5:18 AM
Unknown Object (File)
Thu, Sep 18, 4:10 PM
Unknown Object (File)
Sep 12 2025, 9:56 PM
Unknown Object (File)
Aug 27 2025, 3:01 PM
Unknown Object (File)
Aug 16 2025, 5:21 AM
Unknown Object (File)
Aug 14 2025, 11:32 PM
Unknown Object (File)
Jul 19 2025, 4:31 PM
Unknown Object (File)
Jul 13 2025, 1:50 AM

Details

Summary

There were two loops in pf_setup_pdesc() and pf_normalize_ip6()
walking over the IPv6 header chain. Merge them into one loop,
adjust some length checks and fix IPv6 jumbo option handling. Also
allow strange but legal IPv6 packets with plen=0 passing through
pf. IPv6 jumbo packets still get dropped.
testing dhill@; ok mcbride@ henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, d68283bbf0
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable