Module Name:    src
Committed By:   maxv
Date:           Sat Apr 14 17:55:47 UTC 2018

Modified Files:
        src/sys/netinet6: icmp6.c

Log Message:
Fix 'icmp6len', it shouldn't be ip6_plen, because we may not be at the
beginning of the packet (off+ip6_plen is beyond the end of the mbuf). By
luck, the IP6_EXTHDR_GET that follows will fail and prevent buffer
overflows in non-jumbogram packets.

For jumbograms we will probably be in trouble here; but it doesn't seem
possible to craft reliably a jumbogram for a non-jumbogram-enabled device.

So I don't think it's a huge problem.

To generate a diff of this commit:
cvs rdiff -u -r1.229 -r1.230 src/sys/netinet6/icmp6.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Reply via email to