]> CyberLeo.Net >> Repos - FreeBSD/releng/9.1.git/commit
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
authordes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:15:33 +0000 (10:15 +0000)
committerdes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:15:33 +0000 (10:15 +0000)
commiteee1c15247aa1bf9905120f6da1644895080527d
tree463cdc20ccde2d82930ce1349a53a1bd69124b44
parent1e116b85f3310c383eb8443475bd921ad466a986
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security: CVE-2013-5691
Security: FreeBSD-SA-13:12.ifioctl
Security: CVE-2013-5710
Security: FreeBSD-SA-13:13.nullfs
Approved by: so

git-svn-id: svn://svn.freebsd.org/base/releng/9.1@255448 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
UPDATING
sys/conf/newvers.sh
sys/fs/nullfs/null_vnops.c
sys/net/if.c
sys/netinet6/in6.c
sys/netnatm/natm.c