HomeFreeBSD

pf: Fix incorrect fragment handling

Description

pf: Fix incorrect fragment handling

A sequence of overlapping IPv4 fragments could crash the kernel in
pf due to an assertion.

Reported by: Alexander Bluhm
Obtained from: OpenBSD
MFC after: 3 days
Sponsored by: Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 5f1b1f184b7f12330cf4a027e3db7c6700c67640)

Details

Provenance
kpAuthored on Feb 25 2021, 7:07 AM
Parents
rG555726fda685: pf: Fix build if INVARIANTS is not set
Branches
Unknown
Tags
Unknown