freebsd-src/sbin
Tom Jones e0cb8021a8 ping: Fix handling of IP packet sizes
Ping reads raw IP packets to parse ICMP responses. When reading the
IP Header Len (IHL) ping was was taking the value from the provided
packet without any validation. This could lead to remotely triggerable
stack corruption.

Validate the IHL against expected and recieved data sizes when reading
from the received packet and when reading any quoted packets from within
the ICMP response.

Approved by:	so
Reviewed by:	markj, asomers
Security:	FreeBSD-SA-22:15.ping
Security:	CVE-2022-23093
Sponsored by:   NetApp, Inc.
Sponsored by:   Klara, Inc.
X-NetApp-PR:    #77
Differential Revision: https://reviews.freebsd.org/D37195

(cherry picked from commit 46d7b45a26)
(cherry picked from commit 94395be05c)
2022-11-29 15:01:15 -08:00
..
adjkerntz
bectl bectl(8): don't allow creation of boot environments with spaces 2021-06-11 09:41:51 -08:00
bsdlabel Move disktab to sbin/bsdlabel/ 2018-09-18 20:52:24 +00:00
camcontrol sbin/camcontrol: use calloc/strlcpy where appropriate. 2021-01-17 17:38:46 -08:00
ccdconfig
clri Refactoring of reading and writing of the UFS/FFS superblock. 2018-01-26 00:58:32 +00:00
comcontrol
conscontrol
ddb MFC r353726: ddb: use 'textdump dump' instead of 'call doadump' 2019-11-05 07:06:45 +00:00
decryptcore Revert "Do a sweep and remove most WARNS=6 settings" 2021-08-29 15:28:30 +02:00
devd devd: remove pccard entries 2021-07-21 10:16:33 -06:00
devfs Move all devfs related files to sbin/devfs/ 2018-08-22 15:55:23 +00:00
devmatch MFC r366662 (by imp), r367897 2020-12-06 07:55:12 +00:00
dhclient dhclient: support supersede statement for option 54 2021-08-25 17:02:21 -07:00
dmesg
dump Correct assert added to dump program. 2021-05-20 16:00:57 -07:00
dumpfs The goal of this change is to prevent accidental foot shooting by 2018-02-08 23:06:58 +00:00
dumpon Add Makefile.depend.options 2019-12-19 04:58:11 +00:00
etherswitchcfg Finish removing FDDI and tokenring media support. 2018-04-23 21:10:33 +00:00
fdisk MFC r339707: Allow fdisk(8) to deal with sectors larger than 2048 2019-02-24 01:56:35 +00:00
ffsinfo ffsinfo: Update example to avoid to-be-deprecated vinum 2021-04-09 21:27:13 -04:00
fsck MFC r366572: Fix a few mandoc issues 2020-12-06 07:50:15 +00:00
fsck_ffs [skip ci] correct a few SPDX license tags 2021-07-27 11:41:29 -06:00
fsck_msdosfs MFC r366064, r366065, r366215: sbin/fsck_msdosfs: Fix an integer 2020-10-01 03:08:23 +00:00
fsdb MFC r366408, r366410, r366405 2020-10-10 09:50:09 +00:00
fsirand MFC of 367035. 2020-11-17 05:59:55 +00:00
gbde
geom geom(8): list geoms with /dev/ prefix 2021-01-11 11:54:22 -09:00
ggate Fix remote code execution in ggatec(8). 2021-08-24 10:51:09 -07:00
growfs growfs: allow operation on RW-mounted filesystems 2021-03-05 20:13:09 -05:00
gvinum MFC r366411: gvinum(8): Fix an issue reported by mandoc 2020-10-10 09:44:56 +00:00
hastctl
hastd MFC r368148: fix hastd(8) 2020-12-18 12:20:29 +00:00
ifconfig pfsync: Expose PFSYNCF_OK flag to userspace 2021-05-10 21:46:06 +02:00
init init: execute /etc/rc.final after all user processes have terminated 2021-08-26 01:43:37 -05:00
ipf MFC r349449, r349452: 2019-07-04 03:04:41 +00:00
ipfw ipfw: Introduce dnctl 2021-09-14 10:16:02 +02:00
iscontrol iscontrol(8): Fix a typo in a struct 2021-08-16 07:20:57 +02:00
kldconfig
kldload
kldstat Allow three digits of module id without breaking table alignment. 2018-07-02 09:14:00 +00:00
kldunload
ldconfig Make ldconfig(8) atomic, by removing an unneccessary call to unlink(2) 2018-08-09 11:46:12 +00:00
md5 md5(1): Fix a typo in the manual page 2021-08-19 09:33:21 +02:00
mdconfig [skip ci] fix a typo in a comment in mdconfig.c 2021-04-08 21:33:16 +00:00
mdmfs MFC r366408, r366410, r366405 2020-10-10 09:50:09 +00:00
mknod
mksnap_ffs MFC r361313: 2020-05-28 17:08:39 +00:00
mount MFC r350224 by sobomax: 2020-12-07 20:36:58 +00:00
mount_cd9660 Advise reader to also see mdconfig(8) in mount_cd9660(8). 2018-08-11 08:34:24 +00:00
mount_fusefs sbin/mount_fusefs/mount_fusefs.8: Fix typos 2021-10-12 10:37:04 -06:00
mount_msdosfs MFC r366572: Fix a few mandoc issues 2020-12-06 07:50:15 +00:00
mount_nfs mount_nfs: update man page description for oneopenown 2021-02-17 13:28:40 -08:00
mount_nullfs Fix the build after 5061d5a0cf 2021-04-08 23:11:00 +00:00
mount_udf
mount_unionfs
nandfs
natd
newfs Explain the newfs naming convention 2021-04-20 10:21:33 +02:00
newfs_msdos MFC r362937: Use KERN_MAXPHYS. 2020-07-19 01:59:56 +00:00
newfs_nandfs
nfsiod
nos-tun
nvmecontrol nvmecontrol: update copyright on passthru command 2021-07-30 23:04:52 -06:00
pfctl pfctl: userspace adaptive syncookies configration 2021-10-06 10:46:58 +02:00
pflogd
ping ping: Fix handling of IP packet sizes 2022-11-29 15:01:15 -08:00
ping6 MFC r367976: 2020-12-12 23:01:11 +00:00
quotacheck quotacheck: build with WARNS=3 2018-06-16 23:47:59 +00:00
rcorder [rcorder] [crunch] Fix C function declarations to include void 2020-12-29 10:37:29 -06:00
reboot MFC r367567: 2020-11-13 09:48:54 +00:00
recoverdisk Revert "Do a sweep and remove most WARNS=6 settings" 2021-08-29 15:28:30 +02:00
resolvconf
restore MFC of 359627 2020-04-15 00:18:19 +00:00
route socket: Implement SO_RERROR 2021-08-10 18:59:36 -07:00
routed
rtsol MFC r342788,354926,364771 (markj, bz) 2020-09-11 12:36:05 +00:00
savecore Add Makefile.depend.options 2019-12-19 04:58:11 +00:00
sconfig MFC r357873: 2020-02-18 18:15:33 +00:00
setkey MFC 361810: Refer to AES-CBC as "aes-cbc" rather than "rijndael-cbc" for IPsec. 2020-11-05 19:37:56 +00:00
shutdown MFC r362942: shutdown.8: Fix typo 2020-07-12 07:25:02 +00:00
spppcontrol
sunlabel
swapon MFC r361250: 2020-05-24 10:19:26 +00:00
sysctl MFC 367188: Use a dynamic buffer for the copy of a node's new value. 2020-12-12 17:11:22 +00:00
tests
tunefs MFC of 367035. 2020-11-17 05:59:55 +00:00
umount MFC 362348: 2020-06-27 14:48:10 +00:00
veriexec MFC r366409: veriexec(8): Bugfix for an issue reported by mandoc 2020-10-10 09:42:24 +00:00
zfsbootcfg
Makefile Add support for loader veriexec 2019-04-12 01:03:00 +00:00
Makefile.amd64 NVME support is only for x86 and powerpc64. 2018-06-14 01:15:19 +00:00
Makefile.arm
Makefile.i386 NVME support is only for x86 and powerpc64. 2018-06-14 01:15:19 +00:00
Makefile.inc
Makefile.mips
Makefile.powerpc64 NVME support is only for x86 and powerpc64. 2018-06-14 01:15:19 +00:00
Makefile.sparc64