Date: Mon, 26 Aug 2019 21:35:01 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 240135] Correctness issue in IPv6 extension headers input processing routines Message-ID: <bug-240135-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D240135 Bug ID: 240135 Summary: Correctness issue in IPv6 extension headers input processing routines Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: prabhakar.lakhera@gmail.com There seems to be a correctness issue in pr_inputs defined for various extension header processing routines for IPv6. The routines call IP6_EXTHDR_* macros which may end up releasing the mbuf passed to the routine. Even though the functions are passed pointer to the pointer to mbuf, the pointer is not updated before returning from the routine even for the cases that may not return IPPROTO_DONE. Change would be to simply update the mbuf pointer along with updating the offset. Please refer to implementation of route6_input/dest6_input --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-240135-227>