Page MenuHomeFreeBSD
Differential D46929

pf: stricter address family checks in icmp-in-icmp
ClosedPublic
Actions

Authored by kp on Oct 4 2024, 12:43 PM.
Tags
None
Referenced Files
F139362205: D46929.id144231.diff
Thu, Dec 11, 6:11 AM
Unknown Object (File)
Sat, Dec 6, 12:12 AM
Unknown Object (File)
Wed, Dec 3, 1:45 PM
Unknown Object (File)
Wed, Nov 12, 1:58 AM
Unknown Object (File)
Nov 8 2025, 12:19 AM
Unknown Object (File)
Nov 3 2025, 1:23 AM
Unknown Object (File)
Nov 3 2025, 1:23 AM
Unknown Object (File)
Nov 3 2025, 1:23 AM
View All 61 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net

Details

Reviewers
None
Group Reviewers
network
pfsense
Commits
rG7b033960e15a: pf: stricter address family checks in icmp-in-icmp
Summary

If ipv4+icmp6 or ipv6+icmp packets were embedded into an icmp
payload, we missed to drop them. While there, also add a reason
to the corresponding check in pf_test().
ok mcbride@ claudio@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, 7ce93f3346
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 59742
Build 56628: arc lint + arc unit

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
12 lines

Diff 144231

View Options

sys/netpfil/pf/pf.c

Loading...