HomeFreeBSD

ppp: Reject invalid endpoint discriminator options

Description

ppp: Reject invalid endpoint discriminator options

Per RFC1717 section 5.1.3, the option length must be at least three.
Processing an undersized option would trigger a large out-of-bounds
write.

PR: 271910
Reported by: Robert Morris
Reported by: Décio Brandão (0xDBJ)
Reviewed by: emaste
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58554

(cherry picked from commit b9d07a4308226b683b64827e0aaed1180e0da996)

Details

Provenance
markjAuthored on Jul 31 2026, 1:13 PM
Reviewer
emaste
Differential Revision
D58554: ppp: Reject invalid endpoint discriminator options
Parents
rG2947a48bea3b: amd64: try to fix the build with old clang that does not know about FRED
Branches
Unknown
Tags
Unknown