diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2026-04-28 08:54:24 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2026-04-28 12:00:35 +0000 |
| commit | bea1c2fcd7839fd90a8ce96d6dc6a033779bc3c2 (patch) | |
| tree | 98ec5fd3f4367d8850f68465aaf145b0a929119e /sys/dev/netmap | |
| parent | 7c450d1127c7f08361f848c0ac57189910da8d3b (diff) | |
pf: improve ASCONF chunk validation
When processing an ASCONF chunk we failed to verify that the chunk
length was at least 8 bytes. As a result we might end up passing a
negative length to pf_multihome_scan(). Fortunately this merely meant
the function did nothing, but we should discard such invalid packets, so
explicitly check for this.
MFC after: 1 week
Reported by: Mark Johnston
Sponsored by: Orange Business Services
Diffstat (limited to 'sys/dev/netmap')
0 files changed, 0 insertions, 0 deletions