Page MenuHomeFreeBSD
Differential D46925

pf: reduce IPv6 header parsing code duplication
ClosedPublic
Actions

Authored by kp on Oct 4 2024, 12:43 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Nov 13, 12:38 PM
Unknown Object (File)
Sun, Nov 9, 3:29 AM
Unknown Object (File)
Mon, Nov 3, 6:53 PM
Unknown Object (File)
Mon, Nov 3, 6:53 PM
Unknown Object (File)
Mon, Nov 3, 6:53 PM
Unknown Object (File)
Mon, Nov 3, 2:10 PM
Unknown Object (File)
Mon, Oct 27, 5:32 PM
Unknown Object (File)
Sun, Oct 26, 1:47 AM
View All 67 Files
Subscribers
ae
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net

Details

Reviewers
None
Group Reviewers
network
pfsense
Commits
rG8de7f8ed5eef: pf: reduce IPv6 header parsing code duplication
Summary

There were two loops in pf_setup_pdesc() and pf_normalize_ip6()
walking over the IPv6 header chain. Merge them into one loop,
adjust some length checks and fix IPv6 jumbo option handling. Also
allow strange but legal IPv6 packets with plen=0 passing through
pf. IPv6 jumbo packets still get dropped.
testing dhill@; ok mcbride@ henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, d68283bbf0
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
net/
6 lines
netpfil/
pf/
261 lines
145 lines

Diff 144575

View Options

sys/net/pfvar.h

Loading...
View Options

sys/netpfil/pf/pf.c

Loading...
View Options

sys/netpfil/pf/pf_norm.c

Loading...