3340d77368
It fixes many buffer overflow in different protocol parsers, but none of them are critical, even in absense of Capsicum. Security: CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925 Security: CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929 Security: CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933 Security: CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937 Security: CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973 Security: CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984 Security: CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993 Security: CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203 Security: CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342 Security: CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485 Security: CVE-2017-5486
161 lines
5.0 KiB
C
161 lines
5.0 KiB
C
/*
|
|
* Copyright (c) 1982, 1986, 1993
|
|
* The Regents of the University of California. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by the University of
|
|
* California, Berkeley and its contributors.
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* @(#)tcp.h 8.1 (Berkeley) 6/10/93
|
|
*/
|
|
|
|
typedef uint32_t tcp_seq;
|
|
/*
|
|
* TCP header.
|
|
* Per RFC 793, September, 1981.
|
|
*/
|
|
struct tcphdr {
|
|
uint16_t th_sport; /* source port */
|
|
uint16_t th_dport; /* destination port */
|
|
tcp_seq th_seq; /* sequence number */
|
|
tcp_seq th_ack; /* acknowledgement number */
|
|
uint8_t th_offx2; /* data offset, rsvd */
|
|
uint8_t th_flags;
|
|
uint16_t th_win; /* window */
|
|
uint16_t th_sum; /* checksum */
|
|
uint16_t th_urp; /* urgent pointer */
|
|
} UNALIGNED;
|
|
|
|
#define TH_OFF(th) (((th)->th_offx2 & 0xf0) >> 4)
|
|
|
|
/* TCP flags */
|
|
#define TH_FIN 0x01
|
|
#define TH_SYN 0x02
|
|
#define TH_RST 0x04
|
|
#define TH_PUSH 0x08
|
|
#define TH_ACK 0x10
|
|
#define TH_URG 0x20
|
|
#define TH_ECNECHO 0x40 /* ECN Echo */
|
|
#define TH_CWR 0x80 /* ECN Cwnd Reduced */
|
|
|
|
|
|
#define TCPOPT_EOL 0
|
|
#define TCPOPT_NOP 1
|
|
#define TCPOPT_MAXSEG 2
|
|
#define TCPOLEN_MAXSEG 4
|
|
#define TCPOPT_WSCALE 3 /* window scale factor (rfc1323) */
|
|
#define TCPOPT_SACKOK 4 /* selective ack ok (rfc2018) */
|
|
#define TCPOPT_SACK 5 /* selective ack (rfc2018) */
|
|
#define TCPOPT_ECHO 6 /* echo (rfc1072) */
|
|
#define TCPOPT_ECHOREPLY 7 /* echo (rfc1072) */
|
|
#define TCPOPT_TIMESTAMP 8 /* timestamp (rfc1323) */
|
|
#define TCPOLEN_TIMESTAMP 10
|
|
#define TCPOLEN_TSTAMP_APPA (TCPOLEN_TIMESTAMP+2) /* appendix A */
|
|
#define TCPOPT_CC 11 /* T/TCP CC options (rfc1644) */
|
|
#define TCPOPT_CCNEW 12 /* T/TCP CC options (rfc1644) */
|
|
#define TCPOPT_CCECHO 13 /* T/TCP CC options (rfc1644) */
|
|
#define TCPOPT_SIGNATURE 19 /* Keyed MD5 (rfc2385) */
|
|
#define TCPOLEN_SIGNATURE 18
|
|
#define TCP_SIGLEN 16 /* length of an option 19 digest */
|
|
#define TCPOPT_SCPS 20 /* SCPS-TP (CCSDS 714.0-B-2) */
|
|
#define TCPOPT_UTO 28 /* tcp user timeout (rfc5482) */
|
|
#define TCPOLEN_UTO 4
|
|
#define TCPOPT_TCPAO 29 /* TCP authentication option (rfc5925) */
|
|
#define TCPOPT_MPTCP 30 /* MPTCP options */
|
|
#define TCPOPT_FASTOPEN 34 /* TCP Fast Open (rfc7413) */
|
|
#define TCPOPT_EXPERIMENT2 254 /* experimental headers (rfc4727) */
|
|
|
|
#define TCPOPT_TSTAMP_HDR \
|
|
(TCPOPT_NOP<<24|TCPOPT_NOP<<16|TCPOPT_TIMESTAMP<<8|TCPOLEN_TIMESTAMP)
|
|
|
|
#ifndef FTP_PORT
|
|
#define FTP_PORT 21
|
|
#endif
|
|
#ifndef SSH_PORT
|
|
#define SSH_PORT 22
|
|
#endif
|
|
#ifndef TELNET_PORT
|
|
#define TELNET_PORT 23
|
|
#endif
|
|
#ifndef SMTP_PORT
|
|
#define SMTP_PORT 25
|
|
#endif
|
|
#ifndef NAMESERVER_PORT
|
|
#define NAMESERVER_PORT 53
|
|
#endif
|
|
#ifndef HTTP_PORT
|
|
#define HTTP_PORT 80
|
|
#endif
|
|
#ifndef NETBIOS_NS_PORT
|
|
#define NETBIOS_NS_PORT 137 /* RFC 1001, RFC 1002 */
|
|
#endif
|
|
#ifndef NETBIOS_SSN_PORT
|
|
#define NETBIOS_SSN_PORT 139 /* RFC 1001, RFC 1002 */
|
|
#endif
|
|
#ifndef BGP_PORT
|
|
#define BGP_PORT 179
|
|
#endif
|
|
#ifndef RPKI_RTR_PORT
|
|
#define RPKI_RTR_PORT 323
|
|
#endif
|
|
#ifndef SMB_PORT
|
|
#define SMB_PORT 445
|
|
#endif
|
|
#ifndef RTSP_PORT
|
|
#define RTSP_PORT 554
|
|
#endif
|
|
#ifndef MSDP_PORT
|
|
#define MSDP_PORT 639
|
|
#endif
|
|
#ifndef LDP_PORT
|
|
#define LDP_PORT 646
|
|
#endif
|
|
#ifndef PPTP_PORT
|
|
#define PPTP_PORT 1723
|
|
#endif
|
|
#ifndef NFS_PORT
|
|
#define NFS_PORT 2049
|
|
#endif
|
|
#ifndef OPENFLOW_PORT_OLD
|
|
#define OPENFLOW_PORT_OLD 6633
|
|
#endif
|
|
#ifndef OPENFLOW_PORT_IANA
|
|
#define OPENFLOW_PORT_IANA 6653
|
|
#endif
|
|
#ifndef HTTP_PORT_ALT
|
|
#define HTTP_PORT_ALT 8080
|
|
#endif
|
|
#ifndef RTSP_PORT_ALT
|
|
#define RTSP_PORT_ALT 8554
|
|
#endif
|
|
#ifndef BEEP_PORT
|
|
#define BEEP_PORT 10288
|
|
#endif
|
|
#ifndef REDIS_PORT
|
|
#define REDIS_PORT 6379
|
|
#endif
|