rip: Add missing minimum length validation
ClosedPublic
Actions

Authored by markj on Jul 25 2021, 9:46 PM.

Tags

None

Referenced Files

	F116101993: D31302.diff
	Fri, May 2, 1:45 PM

	Unknown Object (File)
	Tue, Apr 22, 9:09 PM

	Unknown Object (File)
	Mar 17 2025, 8:38 PM

	Unknown Object (File)
	Mar 17 2025, 7:05 AM

	Unknown Object (File)
	Mar 13 2025, 4:08 AM

	Unknown Object (File)
	Feb 27 2025, 4:09 AM

	Unknown Object (File)
	Feb 13 2025, 12:50 AM

	Unknown Object (File)
	Feb 12 2025, 4:08 PM

Subscribers

Details

Reviewers

donner

Group Reviewers

network

Commits

rGba2182520273: rip: Add missing minimum length validation in rip_output()

Summary

If the socket is configured such that the sender is expected to supply
the IP header, then we need to verify that it actually did so.

Reported by: syzkaller+KMSAN
MFC after: 1 week

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 40669
Build 37558: arc lint + arc unit

Event Timeline

markj created this revision.Jul 25 2021, 9:46 PM

Herald added subscribers: melifaro, imp. · View Herald TranscriptJul 25 2021, 9:46 PM

markj requested review of this revision.Jul 25 2021, 9:46 PM

Harbormaster completed remote builds in B40669: Diff 92730.Jul 25 2021, 9:46 PM

markj added a reviewer: network.Jul 25 2021, 9:46 PM

Good catch.

This revision is now accepted and ready to land.Jul 25 2021, 10:29 PM

Closed by commit rGba2182520273: rip: Add missing minimum length validation in rip_output() (authored by markj). · Explain WhyJul 26 2021, 8:55 PM

This revision was automatically updated to reflect the committed changes.

markj added a commit: rGba2182520273: rip: Add missing minimum length validation in rip_output().

Revision Contents
Changeset List

Path

Size

sys/

netinet/

raw_ip.c

9 lines

Diff 92730

View Options

rip: Add missing minimum length validationClosedPublicActions