| created | 2020-07-28T20:38:03Z |
|---|---|
| begin | 2020-05-06T00:00:00Z |
| end | 2020-05-07T00:00:00Z |
| path | src/sys |
| commits | 1 |
| date | 2020-05-06T07:08:53Z | |||
|---|---|---|---|---|
| author | mpi | |||
| files | src/sys/netinet6/ip6_input.c | log | diff | annotate |
| message |
Do sanity checks in ip6_pullexthdr() preventing a panic in m_copydata(9). An invalid/corrupted hop6 option in rip6_input()/ip6_savecontrol() could lead m_copydata(9)s' check to trigger a panic. Fix from maxv@NetBSD where the problem was also reported by syzkaller. Reported-by: [email protected] Reported-by: [email protected] ok sashan@, dlg@, claudio@, deraadt@ |
|||