diff options
| author |   claudio <claudio@openbsd.org> | 2019-01-07 07:54:25 +0000 |
|---|---|---|
| committer | claudio <claudio@openbsd.org> | 2019-01-07 07:54:25 +0000 |
| commit | c7d3e42a1112e4f831b9c2627d941a73f1364644 (patch) | |
| tree | bf9a60815d0a19f8dac188c581c2975665f2346e /sys/dev/usb/uhub.c | |
| parent | It is possible to call m_zero with a read-only cluster. In that case just (diff) | |
| download | wireguard-openbsd-c7d3e42a1112e4f831b9c2627d941a73f1364644.tar.xz wireguard-openbsd-c7d3e42a1112e4f831b9c2627d941a73f1364644.zip | |
Validate the version, and all length fields of IP packets passed to a raw socket
with INP_HDRINCL. There is no reason to allow badly constructed packets through
our network stack. Especially since they may trigger diagnostic checks further
down the stack. Now EINVAL is returned instead which was already used for some
checks that happened before.
OK florian@
Reported-by: syzbot+0361ed02deed123667cb@syzkaller.appspotmail.com
Diffstat (limited to 'sys/dev/usb/uhub.c')
0 files changed, 0 insertions, 0 deletions