]> CyberLeo.Net >> Repos - FreeBSD/releng/9.2.git/commit
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
authordes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:08:20 +0000 (10:08 +0000)
committerdes <des@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 10 Sep 2013 10:08:20 +0000 (10:08 +0000)
commit3930b52b650ac758e9576a848db649c2254aeb5d
tree90b40652801df2cc121e1ab9f7bda01390e970b2
parentc53e171522bdbe0b4b73fd981dd3cf374071c810
In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security: CVE-2013-5691
Security: FreeBSD-SA-13:12.ifioctl
Security: CVE-2013-5710
Security: FreeBSD-SA-13:13.nullfs
Approved by: re

git-svn-id: svn://svn.freebsd.org/base/releng/9.2@255444 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/conf/newvers.sh
sys/fs/nullfs/null_vnops.c
sys/net/if.c
sys/netinet6/in6.c
sys/netnatm/natm.c