mirror of
https://github.com/freebsd/freebsd-src
synced 2024-09-06 17:18:32 +00:00
![]() if_enc(4) can pass IPsec payload to pfil(9) with the outer header or without it. In case of a small packet like ICMP, when mbuf cluster is not used, everything works fine. Otherwise, the first mbuf in a chain has m_len == 0 if it is asked to strip the outer header. pf was not handling such case, and erroneous reading of the outer IP header led to unexpected behavior. Reviewed by: kp, glebius Differential Revision: https://reviews.freebsd.org/D45780 |
||
---|---|---|
.. | ||
ioctl | ||
altq.sh | ||
anchor.sh | ||
CVE-2019-5597.py | ||
CVE-2019-5598.py | ||
daytime_inetd.conf | ||
debug.sh | ||
divapp.c | ||
divert-to.sh | ||
dup.sh | ||
echo_inetd.conf | ||
ether.sh | ||
forward.sh | ||
frag-overindex.py | ||
frag-overlimit.py | ||
frag-overreplace.py | ||
frag6.py | ||
fragcommon.py | ||
fragmentation_compat.sh | ||
fragmentation_no_reassembly.sh | ||
fragmentation_pass.sh | ||
get_state.sh | ||
icmp.sh | ||
if_enc.sh | ||
killstate.sh | ||
limits.sh | ||
loginterface.sh | ||
macro.sh | ||
Makefile | ||
Makefile.depend | ||
map_e.sh | ||
match.sh | ||
modulate.sh | ||
names.sh | ||
nat.sh | ||
nat66.py | ||
pass_block.sh | ||
pflog.sh | ||
pflow.sh | ||
pfsync.sh | ||
pfsync_defer.py | ||
pft_ether.py | ||
pft_read_ipfix.py | ||
prio.sh | ||
proxy.sh | ||
rdr.sh | ||
ridentifier.sh | ||
route_to.sh | ||
rtable.sh | ||
rules_counter.sh | ||
scrub.sh | ||
scrub_compat.sh | ||
scrub_pass.sh | ||
sctp.py | ||
sctp.sh | ||
set_skip.sh | ||
set_tos.sh | ||
src_track.sh | ||
status.sh | ||
syncookie.sh | ||
synproxy.sh | ||
table.sh | ||
tcp.sh | ||
tos.sh | ||
utils.subr |