ICMPv6 HL Exceeded Messages Generated from Wrong Address

Mark Kamichoff prox at prolixium.com
Thu Sep 29 16:38:41 UTC 2016


On Thu, Sep 29, 2016 at 09:52:20AM +0300, Andrey V. Elsukov wrote:
> Hi,
> 
> can you test this patch?
> 
> -- 
> WBR, Andrey V. Elsukov

> Index: icmp6.c
> ===================================================================
> --- icmp6.c	(revision 305970)
> +++ icmp6.c	(working copy)
> @@ -2203,7 +2203,7 @@ icmp6_reflect(struct mbuf *m, size_t off)
>  		 * that we do not own.  Select a source address based on the
>  		 * source address of the erroneous packet.
>  		 */
> -		in6_splitscope(&ip6->ip6_dst, &dst6, &scopeid);
> +		in6_splitscope(&ip6->ip6_src, &dst6, &scopeid);
>  		error = in6_selectsrc_addr(RT_DEFAULT_FIB, &dst6,
>  		    scopeid, NULL, &src6, &hlim);
>  

I just tested this.  ICMPv6 HL exceeded packets are now emitted from the
incoming (correct) interface.  Thank you!

- Mark

-- 
Mark Kamichoff
prox at prolixium.com
http://www.prolixium.com/


More information about the freebsd-net mailing list