Ed Maste 7f8c266da5 Correct ICMPv6/MLDv2 out-of-bounds memory access ...

Previously the ICMPv6 input path incorrectly handled cases where an
MLDv2 listener query packet was internally fragmented across multiple
mbufs.

admbugs:	921
Submitted by:	jtl
Reported by:	CJD of Apple
Approved by:	so
MFC after:	0 minutes
Security:	CVE-2019-5608

2019-08-06 17:11:30 +00:00

..

dest6.c

…

frag6.c

frag6.c: rename ip6q[] to ipq6b[] and consistently use "bucket"

2019-08-05 11:01:12 +00:00

icmp6.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

icmp6.h

…

in6_cksum.c

…

in6_fib.c

…

in6_fib.h

…

in6_gif.c

…

in6_ifattach.c

Convert all IPv4 and IPv6 multicast memberships into using a STAILQ

2019-06-25 11:54:41 +00:00

in6_ifattach.h

…

in6_jail.c

…

in6_mcast.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

in6_pcb.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

in6_pcb.h

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

in6_pcbgroup.c

…

in6_proto.c

frag6.c: move variables and sysctls into local file

2019-08-02 10:29:53 +00:00

in6_rmx.c

…

in6_rss.c

…

in6_rss.h

…

in6_src.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

in6_var.h

Convert all IPv4 and IPv6 multicast memberships into using a STAILQ

2019-06-25 11:54:41 +00:00

in6.c

…

in6.h

Convert all IPv4 and IPv6 multicast memberships into using a STAILQ

2019-06-25 11:54:41 +00:00

ip6_ecn.h

…

ip6_fastfwd.c

…

ip6_forward.c

…

ip6_gre.c

Add GRE-in-UDP encapsulation support as defined in RFC8086.

2019-04-24 09:05:45 +00:00

ip6_id.c

ip6_randomflowlabel: Avoid blocking if random(4) is not available

2019-04-23 17:18:20 +00:00

ip6_input.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

ip6_mroute.c

…

ip6_mroute.h

…

ip6_output.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

ip6_var.h

frag6.c: move variables and sysctls into local file

2019-08-02 10:29:53 +00:00

ip6.h

…

ip6protosw.h

…

ip_fw_nat64.h

…

ip_fw_nptv6.h

…

mld6_var.h

…

mld6.c

Correct ICMPv6/MLDv2 out-of-bounds memory access

2019-08-06 17:11:30 +00:00

mld6.h

…

nd6_nbr.c

Extract eventfilter declarations to sys/_eventfilter.h

2019-05-20 00:38:23 +00:00

nd6_rtr.c

Fix gateway setup for the interface routes.

2019-05-22 21:20:15 +00:00

nd6.c

Extract eventfilter declarations to sys/_eventfilter.h

2019-05-20 00:38:23 +00:00

nd6.h

…

pim6_var.h

…

pim6.h

…

raw_ip6.c

IPv6 cleanup: kernel

2019-08-02 07:41:36 +00:00

raw_ip6.h

…

route6.c

…

scope6_var.h

…

scope6.c

…

sctp6_usrreq.c

Improve consistency. No functional change.

2019-08-05 13:22:15 +00:00

sctp6_var.h

…

send.c

…

send.h

…

tcp6_var.h

…

udp6_usrreq.c

r348494 fixes a race in udp_output(). The same race exists in

2019-07-13 12:45:08 +00:00

udp6_var.h

…