]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Ensure that IP fragments do not extend beyond IP_MAXPACKET.
authormarkj <markj@FreeBSD.org>
Sat, 10 Nov 2018 03:00:36 +0000 (03:00 +0000)
committermarkj <markj@FreeBSD.org>
Sat, 10 Nov 2018 03:00:36 +0000 (03:00 +0000)
commit9fb51bf6af37d3d676ea093047cb989ec4203cfe
tree53b21b92f7f0a0e27cef16842cc1725f974f1982
parentb3c69fd87cbb1c3c5cd6a1a1e292ce0cd736527d
Ensure that IP fragments do not extend beyond IP_MAXPACKET.

Such fragments are obviously invalid, and when processed may end up
violating the sort order (by offset) of fragments of a given packet.
This doesn't appear to be exploitable, however.

Reviewed by: emaste
Discussed with: jtl
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D17914
sys/netinet/ip_reass.c