cvs commit: src/sys/netinet6 in6_proto.c ip6_var.h route6.c

[Hasso Tepper <hasso@xxxxxxxxxxxxxxxxxxxxxxx>]

hasso       2007/04/27 03:39:47 PDT

DragonFly src repository

  Modified files:        (Branch: DragonFly_RELEASE_1_8)
    sys/netinet6         in6_proto.c ip6_var.h route6.c 
  Log:
  MFC fix the security issue with IPV6 type 0 route headers.
  
  IPV6 type 0 route headers are a flawed design, insecure by default, and
  open hosts and networks up to DOS attacks by allowing normal router IP
  filtering to be bypassed. Disable them by default.
  
  Obtained-from: NetBSD
  
  Revision  Changes    Path
  1.10.2.1  +3 -0      src/sys/netinet6/in6_proto.c
  1.10.4.1  +1 -0      src/sys/netinet6/ip6_var.h
  1.6.2.1   +27 -23    src/sys/netinet6/route6.c


http://www.dragonflybsd.org/cvsweb/src/sys/netinet6/in6_proto.c.diff?r1=1.10&r2=1.10.2.1&f=u
http://www.dragonflybsd.org/cvsweb/src/sys/netinet6/ip6_var.h.diff?r1=1.10&r2=1.10.4.1&f=u
http://www.dragonflybsd.org/cvsweb/src/sys/netinet6/route6.c.diff?r1=1.6&r2=1.6.2.1&f=u