[Bug 227674] [ipfw] [ipv6] ICMPv6 echo replies incorrectly matched by kernel ipfw
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Mon Apr 23 12:20:48 UTC 2018
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227674
--- Comment #3 from commit-hook at freebsd.org ---
A commit references this bug:
Author: ae
Date: Mon Apr 23 12:20:08 UTC 2018
New revision: 332886
URL: https://svnweb.freebsd.org/changeset/base/332886
Log:
icmp6_reflect() sends ICMPv6 message with new IPv6 header. So, it is
considered as originated by our host packet. And thus rcvif should be
NULL, since it is used by ipfw(4) to determine that packet was originated
from this host. Some of icmp6_reflect() consumers reuse mbuf and m_pkthdr
without resetting rcvif pointer. To avoid this always reset m_pkthdr.rcvif
pointer to NULL in icmp6_reflect(). Also remove such line and comment
describing this from icmp6_error(), since it does not longer matters.
PR: 227674
Reported by: eugen
MFC after: 1 week
Changes:
head/sys/netinet6/icmp6.c
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-ipfw
mailing list