diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2026-09-21 14:05:01 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-09-29 01:01:48 +0000 |
| commit | 04aa367f47eb3e168ce8d3c351656f63d94d8387 (patch) | |
| tree | 46c6ebd7301095a0775f414941014ce813d23430 /tools/debugscripts | |
| parent | f144a7164a1f6fa7c2ac647465dc54f401a6072b (diff) | |
udp: Let jail policy rewrite the dstaddr for v6 sendto()s
When performing an unconnected sendto() on a v6 UDP socket in a classic
jail, we were not applying the usual policy of replacing the loopback
addr with the jail's primary IP. Compare with, e.g., udp6_connect() or
the IPv4 udp_send(). Fix that.
Approved by: so
Security: FreeBSD-SA-26:69.udp
Security: CVE-2026-101303
Reported by: Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li,
and Ke Xu from Tsinghua University using GLM-5.1 from Z.ai
Reviewed by: bz, glebius
MFC after: 2 weeks
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D59772
(cherry picked from commit fecb9537a83b6746bc731a7cb3bcf6a33df79562)
(cherry picked from commit f3b4b6b756e2ce9e012068c5c91492f757b5c548)
Diffstat (limited to 'tools/debugscripts')
0 files changed, 0 insertions, 0 deletions