NetBSD/src S0VwrTK — sys/netinet6 ip6_input.c
Add more checks in ip6_pullexthdr, to prevent a panic in m_copydata. The Rip6 entry point could see a garbage Hop6 option. Not a big issue, since it's a clean panic only triggerable if the socket has the IN6P_DSTOPTS/IN6P_RTHDR option. Reported-by: syzbot+3b07b3511b4ceb8bf1e2 at syzkaller.appspotmail.com
| Version | Delta | File | |
|---|---|---|---|
| 1.215 | +10 | -2 | sys/netinet6/ip6_input.c |
| +10 | -2 | 1 files | |
