]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Ensure that IP fragments do not extend beyond IP_MAXPACKET.
authorMark Johnston <markj@FreeBSD.org>
Sat, 10 Nov 2018 03:00:36 +0000 (03:00 +0000)
committerMark Johnston <markj@FreeBSD.org>
Sat, 10 Nov 2018 03:00:36 +0000 (03:00 +0000)
commit86af1d0241cae501932016c7359eeaba2f2afa4b
tree53b21b92f7f0a0e27cef16842cc1725f974f1982
parent266b2aa146926315cf23cfa4c1efcbac6902b50a
Ensure that IP fragments do not extend beyond IP_MAXPACKET.

Such fragments are obviously invalid, and when processed may end up
violating the sort order (by offset) of fragments of a given packet.
This doesn't appear to be exploitable, however.

Reviewed by: emaste
Discussed with: jtl
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17914
sys/netinet/ip_reass.c