Change Details

Fix an off-by-one error in IFA6_IS_DEPRECATED() and IFA6_IS_INVALID(). Previously the macros used '>' instead of '>=' when comparing elapsed time against the preferred and valid lifetimes. As a result, just after receiving a Router Advertisement a deprecated or invalid address could remain usable for one extra second. In that window it might be selected as a source address for outgoing connections. PR: 289177 Reported by: Dmitry Nexus <fbsd.4f6a@nexus.tel>

Fix an off-by-one error in IFA6_IS_DEPRECATED() and IFA6_IS_INVALID(). Previously, the macros used '>' instead of '>=' when comparing elapsed time against the preferred and valid lifetimes. This caused any deprecated address to become usable again for one extra second after receiving each Router Advertisement. In that short window, the address could be selected as a source for outgoing connections. Update the checks to use '>=' so that addresses are deprecated or invalid when their lifetime expires. PR: 289177 Reported by: Dmitry Nexus <fbsd.4f6a@nexus.tel>

Fix an off-by-one error in IFA6_IS_DEPRECATED() and IFA6_IS_INVALID(). Previously, the macros used '>' instead of '>=' when comparing elapsed time against the preferred and valid lifetimes. As a result, just afterThis caused any deprecated receiving a Router Advertisement a deprecated or invalid address couldaddress to become usable again for one extra second after receiving each remain usable for one extra second.Router Advertisement. In that short window, In that window it might be selectedthe address could be selected as a source for outgoing connections. Update the checks to use '>=' so that addresses are deprecated or as a source address for outgoing connectionsinvalid when their lifetime expires. PR: 289177 Reported by: Dmitry Nexus <fbsd.4f6a@nexus.tel>