CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2020/10/28 11:29:15
Modified files:
sys/netinet : Tag: OPENBSD_6_7 icmp6.h
sys/netinet6 : Tag: OPENBSD_6_7 icmp6.c
Log message:
When generating the ICMP6 response to an IPv6 packet, the kernel
could use mbuf memory after freeing it. If m_pullup() allocates a
new mbuf, the caller uses the old pointer.
found and reported by Maxime Villard, thanks
OK claudio@ markus@ denis@
this is errata/6.7/026_icmp6.patch.sig
