OpenBSD 4.0 Errata #008: IPv6 ICMP Echo Fix

Contributed by dwc on 2007-01-16 from the Ping-Pong dept.

It's patch time, especially if you're using IPv6...

OpenBSD 4.0 Errata #008: RELIABILITY FIX: January 16, 2007 All architectures
OpenBSD 3.9 Errata #018: RELIABILITY FIX: January 16, 2007 All architectures

Under some circumstances, processing an ICMP6 echo request would cause the kernel to enter an infinite loop.

Source code patchs for 4.0 and 3.9 exist which remedies this problem

(Comments are closed)

Comments

By Anonymous Coward (207.59.237.99) on 2007-01-16 15:54

And cue the "time to change the counter on the website" trolls...
Comments
1. By Anonymous Coward (149.169.135.33) on 2007-01-16 17:05
  
  > And cue the "time to change the counter on the website" trolls...
  
  Often the OpenBSD trolls try and get local exploits to reset that counter. But reliability fixes? C'mon, our trolls are smarter than that.
  Comments
  1. By Anonymous Coward (83.145.122.242) on 2007-01-16 17:11
    
    It can cause a local dos ... ( see netbsd pr linked with the first itojun commit ).
    
    And this patch is incorrect. itojun finally commit it correctly in current but this patch doesn't solve the issue
    
    Comments
    
    By Anonymous Coward (219.90.243.38) on 2007-01-17 00:13
    
    > And this patch is incorrect. itojun finally commit it correctly in current but this patch doesn't solve the issue
    
    Its been fixed now.
    
    Comments
    
    By em (195.212.29.179) on 2007-01-17 15:59
    
    > > And this patch is incorrect. itojun finally commit it correctly in current but this patch doesn't solve the issue
    >
    > Its been fixed now.
    
    Sorry, now I'm a little bit confused. What is the status now. I synchronized stable branch yesterday and compiled the kernel.
    Does it mean that the patch was wrong and now is finally corrected and available in patch branch so I should make a new kernel now?
    Thanks
    
    Comments
    
    By Anonymous Coward (219.90.242.204) on 2007-01-17 23:49
    
    There was a fix which apparently did not fix the problem. This was applied to current, then 3.9 and 4.0 stable trees. Patches were provided for 3.9 and 4.0.
    Then along came a fix in current which actually fixed the problem. This was then merged with 3.9 and 4.0 stable branches. The existing patch files were then replaced with new patch files. The new patch files have a line like "THIS IS THE SECOND REVISION OF THIS PATCH."
    
    Look here for the gory details:
    http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/icmp6.c
    
    As mud?

Latest Articles

Sat, Nov 30
- 18:42 Initial list of 21 EuroBSDcon 2024 videos released (0)
- 18:39 Rafael Sadowski on dpb(1) (1)
Fri, Nov 29
- 09:31 -current now has more flexible performance policy (0)
Mon, Nov 25
- 07:13 unwind: wildcard in blacklist (0)
Fri, Nov 22
- 07:33 Game of Trees 0.106 released (0)
Fri, Nov 15
- 06:51 Game of Trees 0.105 released (0)
Wed, Oct 23
- 07:12 Game of Trees 0.104 released (0)
Tue, Oct 15
- 08:46 LibreSSL 4.0.0 Released (0)
Mon, Oct 14
- 07:05 sshd(8) splitting continues (1)

Credits

Copyright © 2004-2008 Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to April 2nd 2004 as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]