mirror of
https://github.com/freebsd/freebsd-src
synced 2024-09-06 17:18:32 +00:00
239e24eb0c
if_enc(4) can pass IPsec payload to pfil(9) with the outer header or without it. In case of a small packet like ICMP, when mbuf cluster is not used, everything works fine. Otherwise, the first mbuf in a chain has m_len == 0 if it is asked to strip the outer header. pf was not handling such case, and erroneous reading of the outer IP header led to unexpected behavior. Reviewed by: kp, glebius Differential Revision: https://reviews.freebsd.org/D45780 |
||
|---|---|---|
| .. | ||
| ioctl | ||
| altq.sh | ||
| anchor.sh | ||
| CVE-2019-5597.py | ||
| CVE-2019-5598.py | ||
| daytime_inetd.conf | ||
| debug.sh | ||
| divapp.c | ||
| divert-to.sh | ||
| dup.sh | ||
| echo_inetd.conf | ||
| ether.sh | ||
| forward.sh | ||
| frag-overindex.py | ||
| frag-overlimit.py | ||
| frag-overreplace.py | ||
| frag6.py | ||
| fragcommon.py | ||
| fragmentation_compat.sh | ||
| fragmentation_no_reassembly.sh | ||
| fragmentation_pass.sh | ||
| get_state.sh | ||
| icmp.sh | ||
| if_enc.sh | ||
| killstate.sh | ||
| limits.sh | ||
| loginterface.sh | ||
| macro.sh | ||
| Makefile | ||
| Makefile.depend | ||
| map_e.sh | ||
| match.sh | ||
| modulate.sh | ||
| names.sh | ||
| nat.sh | ||
| nat66.py | ||
| pass_block.sh | ||
| pflog.sh | ||
| pflow.sh | ||
| pfsync.sh | ||
| pfsync_defer.py | ||
| pft_ether.py | ||
| pft_read_ipfix.py | ||
| prio.sh | ||
| proxy.sh | ||
| rdr.sh | ||
| ridentifier.sh | ||
| route_to.sh | ||
| rtable.sh | ||
| rules_counter.sh | ||
| scrub.sh | ||
| scrub_compat.sh | ||
| scrub_pass.sh | ||
| sctp.py | ||
| sctp.sh | ||
| set_skip.sh | ||
| set_tos.sh | ||
| src_track.sh | ||
| status.sh | ||
| syncookie.sh | ||
| synproxy.sh | ||
| table.sh | ||
| tcp.sh | ||
| tos.sh | ||
| utils.subr | ||