nd6_dad_ns_input() could trigger a NULL deref in nd6_dad_duplicated().
authorbluhm <bluhm@openbsd.org>
Mon, 13 Dec 2021 14:30:16 +0000 (14:30 +0000)
committerbluhm <bluhm@openbsd.org>
Mon, 13 Dec 2021 14:30:16 +0000 (14:30 +0000)
commitce9bd2eccc20a62f4c8b24c28aa4ccf98639b0a0
tree86e393a61adc8136f2b0de98abe41238005504fb
parent141e8b05ed081bb7866870073ba0fb7f6bad3092
nd6_dad_ns_input() could trigger a NULL deref in nd6_dad_duplicated().
It checks dp in two of three places.  One check got lost in revision
1.83.  Do a dp == NULL once at the beginning.
OK jsg@
Reported-by: syzbot+88c0ce914a0b10b7e1c8@syzkaller.appspotmail.com
sys/netinet6/nd6_nbr.c