diff options
| author |   henning <henning@openbsd.org> | 2007-06-15 08:18:59 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2007-06-15 08:18:59 +0000 |
| commit | 49b222d768eb2b11dc5d795e4581015315c124a0 (patch) | |
| tree | 9eb0615dc9186ff7edb669f7b2da48c0b099a129 /sys/dev/usb/usb.c | |
| parent | more (*&@#$ timeout.h fallout (diff) | |
| download | wireguard-openbsd-49b222d768eb2b11dc5d795e4581015315c124a0.tar.xz wireguard-openbsd-49b222d768eb2b11dc5d795e4581015315c124a0.zip | |
in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check that
the packet is of the expected address family (AF_INET / AF_INET6).
crafted IPv4 packets with IPPROTO_ICMPV6 can make us crash otherwise.
misbehaviour provoked by Adrian Close <adrian@close.wattle.id.au> playing
with nmap; he also helped us big time debugging the problem. thanks!
ok ryan
Diffstat (limited to 'sys/dev/usb/usb.c')
0 files changed, 0 insertions, 0 deletions