Page MenuHomeFreeBSD
Differential D50659

pf: limit how many headers we look at
ClosedPublic
Actions

Authored by kp on Jun 3 2025, 12:48 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, May 22, 9:25 AM
Unknown Object (File)
Tue, May 19, 12:39 AM
Unknown Object (File)
Sun, May 17, 3:34 PM
Unknown Object (File)
Sun, May 17, 10:48 AM
Unknown Object (File)
Sat, May 16, 7:38 PM
Unknown Object (File)
Thu, May 14, 2:57 PM
Unknown Object (File)
Sun, May 10, 9:30 AM
Unknown Object (File)
Wed, Apr 29, 3:32 AM
View All 75 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net

Details

Reviewers
None
Group Reviewers
pfsense
Commits
rGdda88af8fa4e: pf: limit how many headers we look at
Summary

Limit the nested header chain for IPv6 extensions headers and for
authentication headers in the IPv4 case. This prevents spending
excessive cpu time on crafted packets.
OK henning@

Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, 2e5bc81177
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
18 lines

Diff 156612

View Options

sys/netpfil/pf/pf.c

Loading...