HomeFreeBSD

if_vxlan(4): Add checking for loops and nesting of tunnels

Description

if_vxlan(4): Add checking for loops and nesting of tunnels

User misconfiguration, either tunnel loops, or a large number of
different nested tunnels, can overflow the kernel stack. Prevent that
by using if_tunnel_check_nesting().

PR: 278394
Diagnosed by: markj
Reviewed by: kp
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D45197

(cherry picked from commit 93fbfef0b50354b7a1620822454ef29cd415cb2d)

Details

Provenance
zleiAuthored on May 20 2024, 12:14 PM
Reviewer
kp
Differential Revision
D45197: if_vxlan(4): Add checking for nesting of tunnels
Parents
rG5601feb7204b: fix (nuageinit): SSH keys are not handled in metadata but in userdata
Branches
Unknown
Tags
Unknown