path: root/sys/arm/freescale/imx/imx51_ipuv3_fbd.c
diff options
authorTom Jones <thj@FreeBSD.org>2022-11-17 10:31:38 +0000
committerGordon Tetlow <gordon@FreeBSD.org>2022-11-29 22:51:50 +0000
commit46d7b45a267b3d78c5054b210ff7b6c55bfca42b (patch)
tree78716d754eedc3657ba8f279fba29b0f11efb588 /sys/arm/freescale/imx/imx51_ipuv3_fbd.c
parenta6d40b0ad2c51e16a8c99750d5ed6f9aea2be7d4 (diff)
ping: Fix handling of IP packet sizesHEADmain
Ping reads raw IP packets to parse ICMP responses. When reading the IP Header Len (IHL) ping was was taking the value from the provided packet without any validation. This could lead to remotely triggerable stack corruption. Validate the IHL against expected and recieved data sizes when reading from the received packet and when reading any quoted packets from within the ICMP response. Approved by: so Reviewed by: markj, asomers Security: FreeBSD-SA-22:15.ping Security: CVE-2022-23093 Sponsored by: NetApp, Inc. Sponsored by: Klara, Inc. X-NetApp-PR: #77 Differential Revision: https://reviews.freebsd.org/D37195
Diffstat (limited to 'sys/arm/freescale/imx/imx51_ipuv3_fbd.c')
0 files changed, 0 insertions, 0 deletions