svn commit: r306753 - stable/11/sys/netinet6

[Andrey V. Elsukov]

Author: ae
Date: Thu Oct  6 08:11:53 2016
New Revision: 306753
URL: https://svnweb.freebsd.org/changeset/base/306753

Log:
  MFC r306459:
    Fix bug introduced in r274300.
  
    In icmp6_reflect() use original source address of erroneous packet as
    destination address for source selection algorithm when original
    destination address is not one of our own.
  
    Reported by:	Mark Kamichoff <prox at prolixium com>

Modified:
  stable/11/sys/netinet6/icmp6.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netinet6/icmp6.c
==============================================================================
--- stable/11/sys/netinet6/icmp6.c	Thu Oct  6 05:16:44 2016	(r306752)
+++ stable/11/sys/netinet6/icmp6.c	Thu Oct  6 08:11:53 2016	(r306753)
@@ -2146,7 +2146,7 @@ icmp6_reflect(struct mbuf *m, size_t off
 		 * that we do not own.  Select a source address based on the
 		 * source address of the erroneous packet.
 		 */
-		in6_splitscope(&ip6->ip6_dst, &dst6, &scopeid);
+		in6_splitscope(&ip6->ip6_src, &dst6, &scopeid);
 		error = in6_selectsrc_addr(RT_DEFAULT_FIB, &dst6,
 		    scopeid, NULL, &src6, &hlim);