diff options
| author | Henning Brauer <henning@cvs.openbsd.org> | 2007-06-15 08:19:00 +0000 |
|---|---|---|
| committer | Henning Brauer <henning@cvs.openbsd.org> | 2007-06-15 08:19:00 +0000 |
| commit | 35246e47ec18c704be9c8cc1633d3fd0cf84269c (patch) | |
| tree | 1dbfe40b0d6c3b663df5e9a25ea54cf09b4dc3ee /sys/dev/usb/usbdivar.h | |
| parent | 4e3bfca1c17c42dd0ed6639e69f058002c48c98a (diff) | |
in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check that
the packet is of the expected address family (AF_INET / AF_INET6).
crafted IPv4 packets with IPPROTO_ICMPV6 can make us crash otherwise.
misbehaviour provoked by Adrian Close <adrian@close.wattle.id.au> playing
with nmap; he also helped us big time debugging the problem. thanks!
ok ryan
Diffstat (limited to 'sys/dev/usb/usbdivar.h')
0 files changed, 0 insertions, 0 deletions