aboutsummaryrefslogtreecommitdiff
path: root/sys/gnu
diff options
context:
space:
mode:
authorKristof Provost <kp@FreeBSD.org>2024-09-21 16:00:13 +0000
committerKristof Provost <kp@FreeBSD.org>2024-10-10 12:10:39 +0000
commit8de7f8ed5eefe85b4df068c54059656e12539c4b (patch)
tree2c031a674d9fc2bf71afaa02a95a462c2bf49bd8 /sys/gnu
parent8751fbe36ff02ed695f02132ee6eac723d2bbe3f (diff)
pf: reduce IPv6 header parsing code duplication
There were two loops in pf_setup_pdesc() and pf_normalize_ip6() walking over the IPv6 header chain. Merge them into one loop, adjust some length checks and fix IPv6 jumbo option handling. Also allow strange but legal IPv6 packets with plen=0 passing through pf. IPv6 jumbo packets still get dropped. testing dhill@; ok mcbride@ henning@ Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, d68283bbf0 Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D46925
Diffstat (limited to 'sys/gnu')
0 files changed, 0 insertions, 0 deletions