Page MenuHomeFreeBSD

pf: fix handling unreassembled fragments
ClosedPublic

Authored by kp on Aug 4 2025, 3:40 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Jul 18, 8:42 AM
Unknown Object (File)
Wed, Jul 8, 11:30 PM
Unknown Object (File)
Wed, Jul 8, 8:22 PM
Unknown Object (File)
Tue, Jul 7, 4:59 PM
Unknown Object (File)
May 18 2026, 5:48 AM
Unknown Object (File)
May 13 2026, 9:43 PM
Unknown Object (File)
May 12 2026, 8:35 PM
Unknown Object (File)
May 8 2026, 2:07 PM

Details

Summary

If we handle a fragment and are configured not to reassemble it the
pd->proto field will show the layer 4 protocol (i.e. UDP,TCP,SCTP,...) but
pd->virtual_proto will show we're a fragment.
In that case we also don't have the layer 4 checksum pointer. Have code that
cares about L4 (e.g. NAT) check virtual_proto so it doesn't try to dereference a
NULL pcksum field.

PR: 288549
Reported by: Danilo Egea Gondolfo <danilo@FreeBSD.org>
Sponsored by: Rubicon Communications, LLC ("Netgate")
If we receive a fragmented packet and we're not reassembling it we don't have

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65946
Build 62829: arc lint + arc unit

Event Timeline

kp requested review of this revision.Aug 4 2025, 3:40 PM
This revision was not accepted when it landed; it landed in state Needs Review.Aug 5 2025, 10:28 PM
This revision was automatically updated to reflect the committed changes.