d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
10eb2a2bde
freebsd-dev/sys
History
Mark Johnston 10eb2a2bde ipsec: Validate the protocol identifier in ipsec4_ctlinput() 
key_allocsa() expects to handle only IPSec protocols and has an
assertion to this effect.  However, ipsec4_ctlinput() has to handle
messages from ICMP unreachable packets and was not validating the
protocol number.  In practice such a packet would simply fail to match
any SADB entries and would thus be ignored.

Reported by:	syzbot+6a9ef6fcfadb9f3877fe@syzkaller.appspotmail.com
Reviewed by:	ae
MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D31890
2021-09-10 09:09:00 -04:00
..
amd64 vmd(4): Major driver refactoring 2021-09-02 20:58:02 -04:00
arm Revert "arm: Bump KSTACK_PAGES default to match i386/amd64" 2021-09-01 13:13:27 -07:00
arm64 qoriq_dw_pci: Fix typo in link status checking code 2021-08-31 06:22:33 +02:00
bsm Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9). 2021-08-05 23:20:42 +08:00
cam ses: Guard the elm_type_names declaration by _KERNEL 2021-09-02 14:47:18 -06:00
cddl kern: drop remaining references to removed makesyscalls.sh 2021-09-09 19:40:54 -05:00
compat syscalls.master: switch to CAPENABLED flags 2021-09-01 21:58:16 +01:00
conf vmd(4): Major driver refactoring 2021-09-02 20:58:02 -04:00
contrib zfs: merge openzfs/zfs@3b89d9518 (master) into main 2021-08-31 09:02:21 +02:00
crypto crypto(4): Fix a few typos in camellia.c 2021-09-04 13:02:11 +02:00
ddb Create sys/reg.h for the common code previously in machine/reg.h 2021-08-30 12:50:53 +01:00
dev hkbd(4): Fix build on 32bit platforms 2021-09-10 01:51:25 +03:00
dts Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
fs nfsd: Fix build after commit 103b207536 for 32bit arches 2021-09-08 18:55:06 -07:00
gdb
geom g_label: Handle small sector sizes when tasting 2021-09-07 11:19:29 -04:00
gnu
i386 vmd(4): Major driver refactoring 2021-09-02 20:58:02 -04:00
isa
kern net: Enter a net epoch around protocol if_up/down notifications 2021-09-10 09:07:40 -04:00
kgssapi
libkern libkern: remove bcopy 2021-08-24 11:24:07 +00:00
mips Fix a common typo in source code comments 2021-09-04 12:56:57 +02:00
modules vmd(4): Major driver refactoring 2021-09-02 20:58:02 -04:00
net net: Enter a net epoch around protocol if_up/down notifications 2021-09-10 09:07:40 -04:00
net80211 net80211: add func/line information to IEEE80211_DISCARD* macros 2021-09-04 09:24:51 +00:00
netgraph socket: Properly interlock when transitioning to a listening socket 2021-09-07 17:11:43 -04:00
netinet sctp: add explicit cast, no functional change intended 2021-09-09 19:13:47 +02:00
netinet6 ip6mrouter: Make the expiration callout MPSAFE 2021-09-07 11:19:29 -04:00
netipsec ipsec: Validate the protocol identifier in ipsec4_ctlinput() 2021-09-10 09:09:00 -04:00
netpfil dummynet: remove unused definitions 2021-09-08 17:18:00 +02:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed socket: Rename sb(un)lock() and interlock with listen(2) 2021-09-07 15:06:48 -04:00
opencrypto ktls: Support asynchronous dispatch of AEAD ciphers. 2021-08-30 13:11:52 -07:00
powerpc powerpc64: fix radix on pseries TLB invalidation 2021-09-08 08:37:11 -03:00
riscv sifive_spi: Add missing case for SPIBUS_MODE_NONE 2021-08-30 23:38:02 +01:00
rpc Fix a common typo in source code comments 2021-09-04 12:56:57 +02:00
security Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9). 2021-08-05 23:20:42 +08:00
sys VOP_COPY_FILE_RANGE: Add a COPY_FILE_RANGE_TIMEO1SEC flag 2021-09-07 17:35:26 -07:00
teken
tests routing: add IPv6 fib validation procedure. 2021-08-16 23:04:01 +00:00
tools makesyscalls.lua: add a CAPENABLED flag 2021-09-01 21:58:06 +01:00
ufs ffs: remove unused thread argument from ffs_reload() 2021-09-04 12:25:10 -08:00
vm swap_pager: Handle large swap_pager_reserve() requests 2021-09-07 14:04:50 -04:00
x86 x86/tsc.c: Add TSLOG to test_tsc 2021-09-09 17:02:15 -07:00
xdr
xen xen: introduce xen_pv_disks_disabled() 2021-07-28 17:27:04 +02:00
Makefile