[Bug 288263] with pf, link-local target address in icmp6 ADVERT can cause NULL deref

[email protected] Thu, 17 Jul 2025 17:04:06 +0000
Newsgroups gmane.os.freebsd.devel.pf4freebsd
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288263

Kristof Provost <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]
             Status|New                         |In Progress
           Assignee|[email protected]              |[email protected]

--- Comment #1 from Kristof Provost <[email protected]> ---
I can reproduce the panic with your test code, but I'm still working on
reproducing it with an atf-py test case, for integration in our test suite.

I also still need to dig into exactly where we should fix this. Right now my
thinking is that ip6_output() and/or ip6_forward() needs to be a bit more
careful about how it figures out what interface to send the packet out of, but
that's an early gut feeling, not a final conclusion.

-- 
You are receiving this mail because:
You are the assignee for the bug.