Module Name: src Committed By: maxv Date: Mon Feb 25 06:49:44 UTC 2019
Modified Files: src/sys/netcan: can_pcb.c src/sys/netinet: sctp_usrreq.c src/sys/netinet6: raw_ip6.c sctp6_usrreq.c Log Message: RIP6, CAN, SCTP and SCTP6 lack a length check in their _send() functions. Fix RIP6 and CAN, add a big XXX in the SCTP ones. Found by KASAN, triggered by SyzKaller. Reported-by: syzbot+0b9692ae0f49f93b7...@syzkaller.appspotmail.com To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/sys/netcan/can_pcb.c cvs rdiff -u -r1.17 -r1.18 src/sys/netinet/sctp_usrreq.c cvs rdiff -u -r1.174 -r1.175 src/sys/netinet6/raw_ip6.c cvs rdiff -u -r1.18 -r1.19 src/sys/netinet6/sctp6_usrreq.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.