An invalid source routing IP option could overwrite kernel memory
authorbluhm <bluhm@openbsd.org>
Wed, 8 Mar 2023 23:17:02 +0000 (23:17 +0000)
committerbluhm <bluhm@openbsd.org>
Wed, 8 Mar 2023 23:17:02 +0000 (23:17 +0000)
commitd49c6b9957f582865e3b14a12dc9021e40852a81
tree8ed8bb00cb020fe465948c8fa0fe6185e3c4f58c
parentcd9fe0f0e72462786f70f3210967ee6d3f9a9060
An invalid source routing IP option could overwrite kernel memory
by using a bad option length.  This bug is only reachable if both
pf IP option check is disabled and IP source routing is enabled.
reported by @fuzzingrf Erg Noor
OK claudio@ deraadt@
sys/netinet/ip_input.c