Searched hist:"32 af08ecad3fe435ee646791e345526b5bcb7795" (Results 1 – 6 of 6) sorted by relevance
/freebsd/tests/sys/netinet6/ |
H A D | mld.py | 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|
H A D | mld.sh | 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|
H A D | Makefile | diff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|
/freebsd/sys/netinet6/ |
H A D | mld6_var.h | diff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|
H A D | mld6.c | diff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|
H A D | icmp6.c | diff 32af08ecad3fe435ee646791e345526b5bcb7795 Mon Nov 18 22:59:47 CET 2019 Bjoern A. Zeeb <bz@FreeBSD.org> icmpv6: Fix mbuf change in mld
After r354748 mld_input() can change the mbuf. The new pointer is never returned to icmp6_input() and when passed to icmp6_rip6_input() the mbuf may no longer valid leading to a panic. Pass a pointer to the mbuf to mld_input() so we can return an updated version in the non-error case.
Add a test sending an MLD packet case which will trigger this bug.
Pointyhat to: bz Reported by: gallatin, thj MFC After: 2 weeks X-MFC with: r354748 Sponsored by: Netflix
|