diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2023-03-12 15:08:31 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2023-03-20 09:41:37 +0000 |
| commit | 4b77c46dc29a84047c8c6e7d34b35882a54aaa69 (patch) | |
| tree | 3b141995690a83abd81b5cb41fe36ba338c77b5c | |
| parent | 7cca504c7a692afe7259b6f3fa7d698f67f0f1ce (diff) | |
| download | src-4b77c46dc29a84047c8c6e7d34b35882a54aaa69.tar.gz src-4b77c46dc29a84047c8c6e7d34b35882a54aaa69.zip | |
pf tests: test IPv6 fragmentation with link-local addresses
We've observed a panic after pf_refragment6() with link-local addresses,
because pf_refragment6() calls ip6_forward() even for a simple output
case.
That results in us entering ip6_forward() with an mbuf with a NULL
m->m_pkthdr.rcvif, which can cause a NULL deref (but seemingly not for
GUAs.
Test sending fragmented link-local packets to pf.
MFC after: 3 days
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D39063
(cherry picked from commit 225e85513fd7a5e31f649e35f0b99454bb725776)
| -rwxr-xr-x | tests/sys/netpfil/pf/fragmentation.sh | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/tests/sys/netpfil/pf/fragmentation.sh b/tests/sys/netpfil/pf/fragmentation.sh index de83f5d5c82b..f9dcd90b92af 100755 --- a/tests/sys/netpfil/pf/fragmentation.sh +++ b/tests/sys/netpfil/pf/fragmentation.sh @@ -103,6 +103,10 @@ v6_body() jexec singsing ifconfig ${epair_link}b inet6 -ifdisabled ifconfig ${epair_send}a inet6 -ifdisabled + ifconfig ${epair_send}a + jexec alcatraz ifconfig ${epair_send}b + lladdr=$(jexec alcatraz ifconfig ${epair_send}b | awk '/ scopeid / { print($2); }' | cut -f 1 -d %) + jexec alcatraz pfctl -e pft_set_rules alcatraz \ "scrub fragment reassemble" \ @@ -120,6 +124,12 @@ v6_body() atf_check -s exit:0 -o ignore\ ping6 -c 1 -b 70000 -s 65000 2001:db8:42::2 + # Force an NDP lookup + ping -6 -c 1 ${lladdr}%${epair_send}a + + atf_check -s exit:0 -o ignore\ + ping -6 -c 1 -b 70000 -s 65000 ${lladdr}%${epair_send}a + # Forwarding test atf_check -s exit:0 -o ignore \ ping6 -c 1 2001:db8:43::3 |