HomeFreeBSD

pfsync: support deferring IPv6 packets

Description

pfsync: support deferring IPv6 packets

When we send out a deferred packet we must make sure to call
ip6_output() for IPv6 packets. If not we might end up attempting to
ip_fragment() an IPv6 packet, which could lead to us reading outside of
the mbuf.

PR: 268246
Reviewed by: melifaro, zlei
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D38586

(cherry picked from commit 9a1cab6d79b7286e5f650f57ed95625e6ddb8e4b)

Details

Provenance
kpAuthored on Feb 14 2023, 6:11 AM
Reviewer
melifaro
Differential Revision
D38586: pfsync: support deferring IPv6 packets
Parents
rG65d7644bdb16: src.conf: regen man page after RELRO change
Branches
Unknown
Tags
Unknown