Mark Johnston 19afc65a7e ip6_output(): Check the return value of in6_getlinkifnet(). ... If the destination address has an embedded scope ID, make sure that it corresponds to a valid ifnet before proceeding. Otherwise a sendto() with a bogus link-local address can trigger a NULL pointer dereference. Reported by: syzkaller Reviewed by: ae Fixes: r358572 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D25887		2020-07-30 17:43:23 +00:00
..
dest6.c
frag6.c
icmp6.c
icmp6.h
in6_cksum.c
in6_fib.c
in6_fib.h
in6_gif.c
in6_ifattach.c
in6_ifattach.h
in6_jail.c
in6_mcast.c
in6_pcb.c
in6_pcb.h
in6_pcbgroup.c
in6_proto.c
in6_rmx.c	Transition from rtrequest1_fib() to rib_action().	2020-07-21 19:56:13 +00:00
in6_rss.c
in6_rss.h
in6_src.c
in6_var.h	Transition from rtrequest1_fib() to rib_action().	2020-07-21 19:56:13 +00:00
in6.c
in6.h
ip6_ecn.h
ip6_fastfwd.c
ip6_forward.c
ip6_gre.c
ip6_id.c
ip6_input.c
ip6_mroute.c
ip6_mroute.h
ip6_output.c	ip6_output(): Check the return value of in6_getlinkifnet().	2020-07-30 17:43:23 +00:00
ip6_var.h
ip6.h
ip6protosw.h
ip_fw_nat64.h
ip_fw_nptv6.h
mld6_var.h
mld6.c
mld6.h
nd6_nbr.c
nd6_rtr.c	Transition from rtrequest1_fib() to rib_action().	2020-07-21 19:56:13 +00:00
nd6.c	Transition from rtrequest1_fib() to rib_action().	2020-07-21 19:56:13 +00:00
nd6.h	Switch inet6 default route subscription to the new rib subscription api.	2020-07-12 11:24:23 +00:00
pim6_var.h
pim6.h
raw_ip6.c
raw_ip6.h
route6.c
scope6_var.h
scope6.c
sctp6_usrreq.c
sctp6_var.h
send.c
send.h
tcp6_var.h
udp6_usrreq.c
udp6_var.h