HomeFreeBSD

pf: allow MLD LR to be sent without state

Description

pf: allow MLD LR to be sent without state

Change PF behavior to allow MLD Listener Report packets to be sent
without needing a previously created state by MLD Listener Query. It
wasn't working because: (1) you might not have a previous MLD Listener
Query and (2) the addresses of the Query and Report don't match.

ok mikeb@, sashan@

Approved by: so
Security: FreeBSD-SA-24:05.pf
Security: CVE-2024-6640
MFC after: 1 day
Obtained From: OpenBSD, rzalamena <rzalamena@openbsd.org>, 5c526dbdb0f2
Sponsored by: Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 1afe4da75d1d2acd33b25eea942af28aa41c82c2)

Details

Provenance
kpAuthored on Jul 10 2024, 12:36 PM
markjCommitted on Aug 7 2024, 1:37 PM
Parents
rGdcc05aee1495: pf: split ICMP/ICMPv6 number space in pf_icmp_mapping()
Branches
Unknown
Tags
Unknown