From nobody Mon May 11 15:51:09 2026 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gDkjB5tyTz6dCPJ for ; Mon, 11 May 2026 15:51:10 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gDkj96BH7z44H3 for ; Mon, 11 May 2026 15:51:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1778514669; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=AVb5sTe938uT1n1F/JJDn5GtkbJlsQ8Q1BHwdKTNGp8=; b=HfnKVNqgKJXsIp02+b8YrFg1eLN7u9ynFUuRYefXEjUV5txvcDxAGKl8lOBEnLcw8lxAHY oO8FxY5qUtFl2F51XS4wYfnqPygP9i25wK+zuRM5+zbgjTbdzsgXOltCGgUe5Hgxcy4PP1 S4Eg1S+X2itKG4vb4sYnoERR1a5JM9ECc9hiqbcYX0E7tNPSBvUkggTcjxb09a10ZfQwQF +ASTz7iAVmVxQM7Zj+ZLPaLuBsie1ecyoKHixgnTUNdYrZ0xCWdb4ib0O/BD/8Tx+S3Deg 84uzoBmPpD+OOk5VPMPJmBSDAQyuiRV+h2kShVQ9+AMQ0mC2YRcWZdjDZxrSig== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1778514669; a=rsa-sha256; cv=none; b=CqEQ20RSA4vkBeXaszKxC/ICLvgH3fcSgpH33dTH3vSE9pRJnYsGOLoFBITEvb3n3ZQk2W YWb8MFdDZRhZxC2jqKTj/bzF9OemBw0yTkCyRiqEOQJtIunp9KLYAMJReG5N2UOpHxEaoX ypCgiA7vQM7R7W5dKX02O0dWgvPnD16fM7CYi4lM58MWT3ghpLsLvKXXxMKKFbBaPUODCr SSJmUTKlT7BgmC228uut01Q5n8W/qlo5KBqEYoP2ESkxgXGdEADm9ZsFnZ9vdOFy6tqqER 7h/Kg2I1gE8WWuxJCwV5eTlK3jp43eFhYgmhrJ7Pm3ke8+QwTrrAJvGu1MOyTg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1778514669; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=AVb5sTe938uT1n1F/JJDn5GtkbJlsQ8Q1BHwdKTNGp8=; b=u9VblAjX1iGCHgJODwjTeKhZ/ddqaJDH+JDa3cZCLHvyZZbrQGv+uJ+2vlVPCFCtg0yGax 3C3cFjE9Q042RhnVDmyIbpkaOndWiDM5tg/h/tHDqLzTjr6bwGABl72W+ArjVjotmAwbPJ J8SEiwp7IcDXvr1v1wKAq7+z8QRZ4YaIsd0jg+ObBQ9rqthf54341xS1ojLxQ+4mUYLHD+ vMpYGRR1Kg3ZvH3K/aot9EF1mKNXkTkWIdr+4iY/CVCjSHgsSr0kcFdIoGxVoKKpMBkhe/ b1DRj07nGe2Tc5/Y5/ZhUL3Y5agkwfff+K72fXIMJyvhPV0g4l6jqhWhCRO9Hw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4gDkj944Jgz7gJ for ; Mon, 11 May 2026 15:51:09 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 64BFp9Px089394 for ; Mon, 11 May 2026 15:51:09 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 64BFp9b9089393 for bugs@FreeBSD.org; Mon, 11 May 2026 15:51:09 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 295198] ipfilter apparently doesn't validate packet lengths Date: Mon, 11 May 2026 15:51:09 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: cy@FreeBSD.org X-Bugzilla-Status: In Progress X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: cy@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status assigned_to attachments.created Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D295198 Cy Schubert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |In Progress Assignee|bugs@FreeBSD.org |cy@FreeBSD.org --- Comment #2 from Cy Schubert --- Created attachment 270604 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D270604&action= =3Dedit Validate length before checksum. Can you try this patch? BTW, which test, specifically, is it panicking at? I'd like to test it here= as well. I'm currently running the netinet6 tests here. No panic yet. (The net= pfil tests passed.) --=20 You are receiving this mail because: You are the assignee for the bug.=