HomeFreeBSD

pf: allow MLD LR to be sent without state

Description

pf: allow MLD LR to be sent without state

Change PF behavior to allow MLD Listener Report packets to be sent
without needing a previously created state by MLD Listener Query. It
wasn't working because: (1) you might not have a previous MLD Listener
Query and (2) the addresses of the Query and Report don't match.

ok mikeb@, sashan@

Approved by: so
Security: FreeBSD-SA-24:05.pf
Security: CVE-2024-6640
MFC after: 1 day
Obtained From: OpenBSD, rzalamena <rzalamena@openbsd.org>, 5c526dbdb0f2
Sponsored by: Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 1afe4da75d1d2acd33b25eea942af28aa41c82c2)
(cherry picked from commit 3382c691dc6a0d4e1f39ff67b5507f6542972498)

Details

Provenance
kpAuthored on Jul 10 2024, 12:36 PM
markjCommitted on Aug 7 2024, 1:32 PM
Parents
rG6979b4db10b8: pf: split ICMP/ICMPv6 number space in pf_icmp_mapping()
Branches
Unknown
Tags
Unknown