freebsd-skq/sys
Mark Johnston 86af1d0241 Ensure that IP fragments do not extend beyond IP_MAXPACKET.
Such fragments are obviously invalid, and when processed may end up
violating the sort order (by offset) of fragments of a given packet.
This doesn't appear to be exploitable, however.

Reviewed by:	emaste
Discussed with:	jtl
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D17914
2018-11-10 03:00:36 +00:00
..
amd64 amd64: align memset buffers to 16 bytes before using rep stos 2018-11-08 15:12:36 +00:00
arm use -m ${LD_EMULATION} for binary->elf link invocation 2018-11-09 19:16:01 +00:00
arm64 Drop the legacy ELF brandinfo for the old rtld from arm64 and riscv. 2018-11-07 18:28:55 +00:00
bsm
cam Only assert locked for many async events. 2018-11-05 18:47:29 +00:00
cddl Do not ignore arc_adjust() return value. 2018-11-10 01:58:37 +00:00
compat Regen after r340302: Fix freebsd32 mknod(at). 2018-11-09 21:02:07 +00:00
conf Add comment to explain kernel ldscript 0x200000 constant 2018-11-09 20:33:38 +00:00
contrib Octeon SDK: avoid use of uninitialized variable 2018-11-09 19:17:25 +00:00
crypto rijndael (AES): Avoid leaking sensitive data on kernel stack 2018-10-26 20:53:01 +00:00
ddb ddb: Enable 'thread <address>' 2018-10-20 20:45:49 +00:00
dev Fix first-packet completion 2018-11-09 22:18:43 +00:00
dts Revert r339421 due to unintended files included to commit. 2018-10-18 15:17:58 +00:00
fs Change nfs_advlock() so that the NFSVOPUNLOCK() is mostly done at the end. 2018-11-06 22:50:50 +00:00
gdb
geom Revert r340187, it breaks EOD (end-of-device) detection logic. Turns out, 2018-11-07 16:28:09 +00:00
gnu dts: Import DTS for arm64 2018-08-23 13:21:01 +00:00
i386 Add a custom implementation of cpu_lock_delay() for x86. 2018-11-05 22:54:03 +00:00
isa Reapply, with minor tweaks, r338025, from the original commit: 2018-09-26 17:12:14 +00:00
kern Fix freebsd32 mknod(at). 2018-11-09 21:01:16 +00:00
kgssapi
libkern mcount: tidy up ANSIfication 2018-10-20 22:39:35 +00:00
mips Add a KPI for the delay while spinning on a spin lock. 2018-11-05 21:34:17 +00:00
modules Retire CLANG_NO_IAS34 2018-11-01 23:11:47 +00:00
net Fix rxcsum issue introduced in r338838 2018-11-07 19:31:48 +00:00
net80211 Fix misspellings of transmitter/transmitted 2018-08-10 20:37:32 +00:00
netgraph Make ng_pptpgre(8) netgraph node be able to restore order for packets 2018-11-04 19:10:44 +00:00
netinet Ensure that IP fragments do not extend beyond IP_MAXPACKET. 2018-11-10 03:00:36 +00:00
netinet6 in6_ifattach_linklocal: handle immediate removal of the new LLA 2018-11-08 19:50:23 +00:00
netipsec Add sadb_x_sa2 extension to SADB_ACQUIRE requests. 2018-10-21 14:19:16 +00:00
netpfil pf: Prevent tables referenced by rules in anchors from getting disabled. 2018-11-08 21:54:40 +00:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed Introduce and use sgid_index in CM requests in ibcore. 2018-09-09 07:20:15 +00:00
opencrypto Add sha224 to the authctx union. 2018-10-23 18:07:37 +00:00
powerpc powerpc: Use MAX() macro instead of max() inline function to calculate Maxmem 2018-11-10 02:37:56 +00:00
riscv Drop the legacy ELF brandinfo for the old rtld from arm64 and riscv. 2018-11-07 18:28:55 +00:00
rpc
security Add const to input-only char * arguments. 2018-11-02 20:50:22 +00:00
sparc64 Add a KPI for the delay while spinning on a spin lock. 2018-11-05 21:34:17 +00:00
sys Regen after r340302: Fix freebsd32 mknod(at). 2018-11-09 21:02:07 +00:00
teken Implement ECMA-48 "REP", some Linuxen have started emitting them recently. 2018-10-21 08:29:36 +00:00
tests
tools Use ${ECHO} in dtb/dtbo build, pass in from dtb.mk for -s 2018-11-09 18:56:40 +00:00
ufs Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
vm Fix a use-after-free in swp_pager_meta_free(). 2018-11-07 23:28:11 +00:00
x86 Add a custom implementation of cpu_lock_delay() for x86. 2018-11-05 22:54:03 +00:00
xdr
xen xen: legacy PVH fixes for the new interrupt count 2018-09-13 07:14:11 +00:00
Makefile