aboutsummaryrefslogtreecommitdiff
path: root/tests/sys/netpfil/pf/Makefile
diff options
context:
space:
mode:
authorKristof Provost <kp@FreeBSD.org>2019-03-22 07:39:28 +0000
committerKristof Provost <kp@FreeBSD.org>2019-03-22 07:39:28 +0000
commit7de4bd92b8a1f510c88ea3b5af0bcb106af6ba11 (patch)
tree00b1f7c73bf5acf4b5c22e6f16c9c5d7873216f7 /tests/sys/netpfil/pf/Makefile
parent4782b90e4abc214cbbdc8b861b749c5cc236cb8c (diff)
downloadsrc-7de4bd92b8a1f510c88ea3b5af0bcb106af6ba11.tar.gz
src-7de4bd92b8a1f510c88ea3b5af0bcb106af6ba11.zip
pf tests: Test CVE-2019-5598
Verify that pf correctly drops inconsistent ICMP packets (i.e. where the IP src/dst do not match the IP src/dst in the ICMP packet.
Notes
Notes: svn path=/head/; revision=345409
Diffstat (limited to 'tests/sys/netpfil/pf/Makefile')
-rw-r--r--tests/sys/netpfil/pf/Makefile7
1 files changed, 5 insertions, 2 deletions
diff --git a/tests/sys/netpfil/pf/Makefile b/tests/sys/netpfil/pf/Makefile
index 84a40a16699c..bf2510b9c02b 100644
--- a/tests/sys/netpfil/pf/Makefile
+++ b/tests/sys/netpfil/pf/Makefile
@@ -16,15 +16,18 @@ ATF_TESTS_SH+= anchor \
route_to \
synproxy \
set_skip \
- pfsync
+ pfsync \
+ icmp
${PACKAGE}FILES+= utils.subr \
echo_inetd.conf \
sniffer.py \
pft_ping.py \
- CVE-2019-5597.py
+ CVE-2019-5597.py \
+ CVE-2019-5598.py
${PACKAGE}FILESMODE_pft_ping.py= 0555
${PACKAGE}FILESMODE_CVE-2019-5597.py= 0555
+${PACKAGE}FILESMODE_CVE-2019-5598.py= 0555
.include <bsd.test.mk>