Page MenuHomeFreeBSD
Differential D58554

ppp: Reject invalid endpoint discriminator options
ClosedPublic
Actions

Authored by markj on Jul 30 2026, 3:03 PM.
Tags
None
Referenced Files
F170569731: D58554.diff
Sat, Sep 5, 11:10 AM
F170568819: D58554.diff
Sat, Sep 5, 11:05 AM
Unknown Object (File)
Thu, Sep 3, 9:34 PM
Unknown Object (File)
Thu, Sep 3, 12:55 PM
Unknown Object (File)
Wed, Sep 2, 2:25 PM
Unknown Object (File)
Wed, Sep 2, 2:22 PM
Unknown Object (File)
Wed, Sep 2, 10:40 AM
Unknown Object (File)
Wed, Sep 2, 5:20 AM
View All 58 Files
Subscribers
imp

Details

Reviewers
jhb
emaste
Group Reviewers
secteam
Commits
rG428f4b194cef: ppp: Reject invalid endpoint discriminator options
rG3e5e24f16eb1: ppp: Reject invalid endpoint discriminator options
rG7b0db357359a: ppp: Reject invalid endpoint discriminator options
rG10dd09ca4c77: ppp: Reject invalid endpoint discriminator options
rG542c98fba386: ppp: Reject invalid endpoint discriminator options
rG30b4bdd451ad: ppp: Reject invalid endpoint discriminator options
rGb9d07a430822: ppp: Reject invalid endpoint discriminator options
Summary

Per RFC1717 section 5.1.3, the option length must be at least three.
Processing an undersized option would trigger a large out-of-bounds
write.

PR: 271910
Reported by: Robert Morris
Reported by: Décio Brandão (0xDBJ)

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.Jul 30 2026, 3:03 PM
Herald added a subscriber: imp. · View Herald TranscriptJul 30 2026, 3:03 PM
markj requested review of this revision.Jul 30 2026, 3:03 PM
Harbormaster completed remote builds in B75293: Diff 183110.Jul 30 2026, 3:03 PM
markj added a child revision: D58555: ppp: Avoid overflow when formatting endpoint discriminator options.Jul 30 2026, 3:04 PM
emaste accepted this revision.Jul 30 2026, 4:02 PM
This revision is now accepted and ready to land.Jul 30 2026, 4:02 PM
Closed by commit rGb9d07a430822: ppp: Reject invalid endpoint discriminator options (authored by markj). · Explain WhyJul 31 2026, 1:30 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rGb9d07a430822: ppp: Reject invalid endpoint discriminator options.
markj added a commit: rG30b4bdd451ad: ppp: Reject invalid endpoint discriminator options.Fri, Aug 7, 12:42 PM
markj added a commit: rG542c98fba386: ppp: Reject invalid endpoint discriminator options.Fri, Aug 7, 12:51 PM
cperciva added a commit: rG10dd09ca4c77: ppp: Reject invalid endpoint discriminator options.Thu, Aug 20, 5:54 PM
Herald added a reviewer: scheduler. · View Herald TranscriptThu, Aug 20, 5:54 PM
lwhsu removed a reviewer: scheduler.Thu, Aug 20, 8:12 PM
markj added a commit: rG7b0db357359a: ppp: Reject invalid endpoint discriminator options.Tue, Aug 25, 4:01 PM
markj added a commit: rG3e5e24f16eb1: ppp: Reject invalid endpoint discriminator options.
markj added a commit: rG428f4b194cef: ppp: Reject invalid endpoint discriminator options.

Revision Contents
Changeset List

PathSize
usr.sbin/
ppp/
6 lines

Diff 183154

View Options

usr.sbin/ppp/lcp.c

Loading...