https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203585
Bug ID: 203585
Summary: update 235959 and 235961 breaks ipv6 layer 4
checksums in ipf
Product: Base System
Version: 10.2-STABLE
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
r235959 changes ipv6 layer4 checksums for udp and
r235961 changes ipv6 layer4 checksums for tcp
these changes result in th_sum and uh_sum only containing pseudo checksum data,
which breaks ipfilter checksum verification for stateful ipv6 .
sys/contrib/ipfilter/netinet/fil.c compares for tcp
csump = &((tcphdr_t *)fin->fin_dp)->th_sum;
or for udp
csump = &udp->uh_sum;
against ipfilters own checksum functions fr_cksum , to validate checksums, this
check now fails, resulting in ipfilter not being able to function statefully
for ipv6 tcp/udp
see bug 203275
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"
