Searched hist:b9f0dbc3d006e0b904ee4275d54459f4edd65bb8 (Results 1 – 2 of 2) sorted by relevance
| /freebsd/tests/sys/netpfil/pf/ |
| H A D | icmp6.sh | b9f0dbc3d006e0b904ee4275d54459f4edd65bb8 Tue Jul 09 11:22:18 CEST 2024 Kristof Provost <kp@FreeBSD.org> pf tests: ensure we don't confuse different ICMP types
When creating a state for ICMP (v4 or v6) packets we only used the ID, which
means that we could confuse different ICMP types. For example, if we allowed
neighbour discovery but not ICMPv6 echo requests an ND packet could create a
state that the echo request would match.
Test that this is now fixed.
Reported by: Enrico Bassetti <e.bassetti@tudelft.nl>
MFC after: 1 day
Sponsored by: Rubicon Communications, LLC ("Netgate")
|
| H A D | Makefile | diff b9f0dbc3d006e0b904ee4275d54459f4edd65bb8 Tue Jul 09 11:22:18 CEST 2024 Kristof Provost <kp@FreeBSD.org> pf tests: ensure we don't confuse different ICMP types
When creating a state for ICMP (v4 or v6) packets we only used the ID, which
means that we could confuse different ICMP types. For example, if we allowed
neighbour discovery but not ICMPv6 echo requests an ND packet could create a
state that the echo request would match.
Test that this is now fixed.
Reported by: Enrico Bassetti <e.bassetti@tudelft.nl>
MFC after: 1 day
Sponsored by: Rubicon Communications, LLC ("Netgate")
|