diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2026-04-26 09:34:55 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-04-28 20:32:11 +0000 |
| commit | 0ab05345fb408b70f37a6b1c522ef3e084fc5f58 (patch) | |
| tree | de6d4c2bcc7317ee7abf2cbfed82dc360e100ee2 /lib/libomp | |
| parent | 5a5e7883a3bb85cbdcf9e2fc0f40b0a391659c30 (diff) | |
pf: improve SCTP validation
As per RFC5061 "4.2. New Parameter Types" the add/delete IP address
parameters (0xc001, 0xc002) may not be present in an INIT or INIT-ACK
chunk. They are only allowed to be present in an ASCONF chunk.
This also prevents unbounded recursion while parsing an SCTP packet.
Approved by: so
Security: FreeBSD-SA-26:14.pf
Security: CVE-2026-7164
PR: 294799
Reported by: Igor Gabriel Sousa e Souza
MFC after: 3 days
Sponsored by: Orange Business Services
Diffstat (limited to 'lib/libomp')
0 files changed, 0 insertions, 0 deletions