Authentication-Results: name.execsw.org;
	dkim=pass (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=c8kPNZ+s;
	dkim=fail reason="signature verification failed" (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=qRYrCCro
Received: by mail.netbsd.org (Postfix, from userid 605)
	id 8D27184F4F; Fri, 19 Apr 2024 00:55:37 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
	s=20240131; t=1713488137;
	bh=FVf+RbqUTE3LivoVhf/S69ZbmIuw4/8xCz7AHf+20zo=;
	h=Date:From:Subject:To:List-Id:Reply-To:List-Unsubscribe;
	b=c8kPNZ+slonSolGxuMdpoazEW/kOBYu+/xmoXrk74pq/7T0u6QLavCoe7ChgzkPvy
	 ILxS6Q7JGM0wFZCle6gCeTFXUO1/dB5JRTjzt5/ulnWT7lCcJ7P/OLwaoaXQ7mq1Ml
	 NswRPvAg0voEzfnl9dmphlXO6OYHciGpm87ghUz0=
Received: from localhost (localhost [127.0.0.1])
	by mail.netbsd.org (Postfix) with ESMTP id 726A384F4B
	for <source-changes@NetBSD.org>; Fri, 19 Apr 2024 00:55:36 +0000 (UTC)
X-Virus-Scanned: amavisd-new at netbsd.org
Authentication-Results: mail.netbsd.org (amavisd-new);
	dkim=pass (1024-bit key) header.d=netbsd.org
Received: from mail.netbsd.org ([127.0.0.1])
	by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025)
	with ESMTP id w6l_enlr0hhI for <source-changes@netbsd.org>;
	Fri, 19 Apr 2024 00:55:36 +0000 (UTC)
Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197])
	by mail.netbsd.org (Postfix) with ESMTP id 01F1884D36
	for <source-changes@NetBSD.org>; Fri, 19 Apr 2024 00:55:35 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
	s=20240131; t=1713488136;
	bh=FVf+RbqUTE3LivoVhf/S69ZbmIuw4/8xCz7AHf+20zo=;
	h=Date:From:Subject:To:Reply-To;
	b=qRYrCCro1vSTbH0brsC3FWeaz1TSTiBNTVNySWggyj/4z5LKq5QCcskjVQOVO7ik5
	 BCvj+Gvw7s6WWPFspFr1IC6g8GYN22zrPz7qhgyK9QYXaB3LypK+We0nErGPOMRQGh
	 sMvLw8+QONOIF6pENpdW9EznS3KQNdbeA4A7+uTM=
Received: by cvs.NetBSD.org (Postfix, from userid 500)
	id E2ABDFA2C; Fri, 19 Apr 2024 00:55:35 +0000 (UTC)
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
MIME-Version: 1.0
Date: Fri, 19 Apr 2024 00:55:35 +0000
From: "Taylor R Campbell" <riastradh@netbsd.org>
Subject: CVS commit: src/sys/netinet6
To: source-changes@NetBSD.org
X-Mailer: log_accum
Message-Id: <20240419005535.E2ABDFA2C@cvs.NetBSD.org>
Sender: source-changes-owner@NetBSD.org
List-Id: <source-changes.NetBSD.org>
Precedence: bulk
Reply-To: source-changes-d@NetBSD.org
Mail-Reply-To: "Taylor R Campbell" <riastradh@netbsd.org>
Mail-Followup-To: source-changes-d@NetBSD.org
List-Unsubscribe: <mailto:majordomo@NetBSD.org?subject=Unsubscribe%20source-changes&body=unsubscribe%20source-changes>

Module Name:	src
Committed By:	riastradh
Date:		Fri Apr 19 00:55:35 UTC 2024

Modified Files:
	src/sys/netinet6: ip6_output.c

Log Message:
ip6_output: Initialize plen for ip6_hopopts_input.

This funny little block in ip6_process_hopopts assumes it is
initialized as and behaves differently depending on whether it's zero
or not:

https://nxr.netbsd.org/xref/src/sys/netinet6/ip6_input.c?r=1.227#976

In the other call site, it is initialized to ip6->ip6_plen:

https://nxr.netbsd.org/xref/src/sys/netinet6/ip6_input.c?r=1.227#561

Reported-by: syzbot+587e3b707bdfe533283f@syzkaller.appspotmail.com
https://syzkaller.appspot.com/bug?extid=587e3b707bdfe533283f


To generate a diff of this commit:
cvs rdiff -u -r1.234 -r1.235 src/sys/netinet6/ip6_output.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.