Page MenuHomeFreeBSD

Fix getsockopt(..., IPPROTO_IP, IP_OPTIONS, ..., ...)
ClosedPublic

Authored by tuexen on Jan 5 2019, 12:44 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Dec 17, 11:07 AM
Unknown Object (File)
Fri, Dec 12, 9:59 AM
Unknown Object (File)
Fri, Dec 12, 9:19 AM
Unknown Object (File)
Nov 26 2025, 11:32 PM
Unknown Object (File)
Nov 25 2025, 5:20 AM
Unknown Object (File)
Nov 24 2025, 4:15 PM
Unknown Object (File)
Nov 24 2025, 1:17 AM
Unknown Object (File)
Nov 23 2025, 1:41 PM
Subscribers

Details

Summary

r336616 copies inp->inp_options using the m_dup() function. However, this function expects an mbuf packet header at the beginning, which is not true in this case. Therefore, use m_copym() instead of m_dup().

Test Plan

Use the attached test program to verify that getsockopt(..., IPPROTO_IP, IP_OPTIONS, ..., ...) works. Without the patch, the system panics when running the test program.

This issue what found by running syzkaller.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 21844