Home
last modified time | relevance | path

Searched hist:"32 af08ecad3fe435ee646791e345526b5bcb7795" (Results 1 – 6 of 6) sorted by relevance

/freebsd/tests/sys/netinet6/
H A Dmld.py32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix
H A Dmld.sh32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix
H A DMakefilediff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix
/freebsd/sys/netinet6/
H A Dmld6_var.hdiff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix
H A Dmld6.cdiff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix
H A Dicmp6.cdiff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld

After r354748 mld_input() can change the mbuf. The new pointer
is never returned to icmp6_input() and when passed to
icmp6_rip6_input() the mbuf may no longer valid leading to
a panic.
Pass a pointer to the mbuf to mld_input() so we can return an
updated version in the non-error case.

Add a test sending an MLD packet case which will trigger this bug.

Pointyhat to: bz
Reported by: gallatin, thj
MFC After: 2 weeks
X-MFC with: r354748
Sponsored by: Netflix