Date: Fri, 18 Sep 2009 15:50:03 GMT From: Bruce Simpson <bms@incunabulum.net> To: freebsd-net@FreeBSD.org Subject: Re: kern/133786: [netinet] [patch] ip_input might cause kernel panic Message-ID: <200909181550.n8IFo3gu006351@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/133786; it has been noted by GNATS. From: Bruce Simpson <bms@incunabulum.net> To: freebsd-gnats-submit@FreeBSD.org Cc: Subject: Re: kern/133786: [netinet] [patch] ip_input might cause kernel panic Date: Fri, 18 Sep 2009 16:40:20 +0100 Interesting... the input checks in ip_input() should really have screened this out, however, if m->m_len is indeed smaller than mcopy (temporary mbuf created in the ip_forward() slow path), then m_copydata() may well stomp on memory not owned by the mbuf chain.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200909181550.n8IFo3gu006351>