Kristof Provost 6a3266f72e pf: drop IPv6 packets built from overlapping fragments in pf reassembly ... The reassembly state will be dropped after timeout, all related fragments are dropped until that. This is conforming to RFC 5722. - Sort pf_fragment fields while there. - If the fr_queue is empty, we had overlapping fragments, don't add new ones. - If we detect overlapping IPv6 fragments, flush the fr_queue and drop all fragments immediately. - Rearrange debug output, to make clear what happens. - An IPv4 fragment that is totaly overlapped does not inclease the bad fragment counter. - Put an KASSERT into pf_isfull_fragment() to make sure that the fr_queue is never emtpy there. discussed with Fernando Gont; ok henning@ Obtained from: OpenBSD, bluhm <bluhm@openbsd.org>, 8b45f36762 Sponsored by: Rubicon Communications, LLC ("Netgate")		2025-01-14 09:54:19 +01:00
..
acl	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
aio	aio_kqueue_test: Fix CID 1558429	2025-01-09 08:42:36 -06:00
audit	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
auditpipe	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
cam	Make the CTL tests more resilient	2024-11-04 19:06:53 -07:00
capsicum	capsicum tests: Serialize functional tests	2024-09-04 14:28:28 +00:00
cddl	zfsd: replace vdevs with the AUX faulted state	2024-10-03 16:21:46 -06:00
common	vnet tests: verify that we can load if_epair and if_bridge	2024-07-23 15:57:25 +02:00
compat32	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
devrandom	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
fifo	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
file	path_test: adjust test for open(O_PATH | O_CREAT)	2025-01-07 04:46:19 +02:00
fs	fusefs: Coverity cleanup in the lseek tests	2025-01-06 12:30:16 -07:00
geom	ggate tests: Use unique ports among tests	2024-09-04 14:28:28 +00:00
kern	SO_SPLICE tests: Fix a comment typo	2025-01-06 21:03:00 +00:00
kqueue	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
mac	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
mqueue	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
net	if_ovpn tests: destroy an if_ovpn interface before it's been used	2024-09-10 20:34:23 +02:00
netgraph	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
netinet	inpcb: Further restrict binding to a port owned by a different UID	2024-12-23 15:41:06 +00:00
netinet6	ndp tests: Update to chase commit 9206c79961	2024-11-29 17:01:33 +00:00
netipsec	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
netlink	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
netmap	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
netpfil	pf: drop IPv6 packets built from overlapping fragments in pf reassembly	2025-01-14 09:54:19 +01:00
opencrypto	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
pjdfstest	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
posixshm	shm: Respect PROT_MAX when creating private mappings	2024-10-04 15:56:34 +00:00
ses	Remove $FreeBSD$: two-line .h pattern	2023-08-16 11:54:16 -06:00
sound	sound tests: Add SNDSTIOC_ADD_USER_DEVS test	2024-08-24 15:07:29 +03:00
sys	tests: Add buf_ring overflow checks	2024-09-30 12:04:24 +00:00
vfs	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00
vm	shm: Respect PROT_MAX when creating private mappings	2024-10-04 15:56:34 +00:00
vmm	spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSD	2023-05-12 10:44:03 -06:00
Makefile	ctl: add some ATF tests for READ BUFFER	2024-09-04 14:38:12 +00:00
Makefile.depend	Remove $FreeBSD$: one-line sh pattern	2023-08-16 11:55:03 -06:00
Makefile.inc	Remove residual blank line at start of Makefile	2024-07-15 16:43:39 -06:00