---
- branch: MAIN
  date: Sat Apr 14 17:55:47 UTC 2018
  files:
  - new: '1.230'
    old: '1.229'
    path: src/sys/netinet6/icmp6.c
    pathrev: src/sys/netinet6/icmp6.c@1.230
    type: modified
  id: 20180414T175547Z.299fb94f858c270ad09860a80f916dc8974e80df
  log: |
    Fix 'icmp6len', it shouldn't be ip6_plen, because we may not be at the
    beginning of the packet (off+ip6_plen is beyond the end of the mbuf). By
    luck, the IP6_EXTHDR_GET that follows will fail and prevent buffer
    overflows in non-jumbogram packets.

    For jumbograms we will probably be in trouble here; but it doesn't seem
    possible to craft reliably a jumbogram for a non-jumbogram-enabled device.

    So I don't think it's a huge problem.
  module: src
  subject: 'CVS commit: src/sys/netinet6'
  unixtime: '1523728547'
  user: maxv