]> CyberLeo.Net >> Repos - FreeBSD/stable/8.git/commit
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
authordes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:12:09 +0000 (10:12 +0000)
committerdes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:12:09 +0000 (10:12 +0000)
commitb363600668417bb2a489b5dbb9b5c52852ec8550
tree9de348bd8c40e733f340667566187834dad23018
parentbb505e1946fb15a90bf02746b1de4a78d1c1fff7
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security: CVE-2013-5691
Security: FreeBSD-SA-13:12.ifioctl
Security: CVE-2013-5710
Security: FreeBSD-SA-13:13.nullfs
Approved by: so

git-svn-id: svn://svn.freebsd.org/base/stable/8@255445 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/fs/nullfs/null_vnops.c
sys/net/if.c
sys/netinet6/in6.c
sys/netnatm/natm.c