Skip to content

More various fixes (F-*)#116

Open
gasbytes wants to merge 6 commits into
wolfSSL:masterfrom
gasbytes:2026-05-11-findings-fixes
Open

More various fixes (F-*)#116
gasbytes wants to merge 6 commits into
wolfSSL:masterfrom
gasbytes:2026-05-11-findings-fixes

Conversation

@gasbytes
Copy link
Copy Markdown
Contributor

  • a1bbd16 added missing testing coverage that injects a non-first fragment and asserts the datagram is dropped
  • f8fd06d validate opt[1] against remainign options space
  • dd4f97e added checks to prevent null pointer deference wolfip_sock_* mirroring the fix applied to wolfip_sock_socket
  • eaae38e hoist the lsrr/ssrr drop check above the forwarding branch so source-routed packets are dropped on both paths per RFC 7126 section 3.8
  • 710ec42 populate last_pkt_ttl (time to live of the last packet) mirroring the same behaviour that we for for icmp/raw sockets to cover all accepted segments/fragments
  • 4e2060b drop double byte-swap ip id field

gasbytes added 5 commits May 11, 2026 16:43
same behaviour that we for for icmp/raw sockets to cover all accepted
segments/fragments
…routed packets are dropped on both paths per RFC 7126 section 3.8
mirroring the fix applied to wolfip_sock_socket
@gasbytes gasbytes self-assigned this May 12, 2026
@gasbytes gasbytes force-pushed the 2026-05-11-findings-fixes branch from a1bbd16 to d6ef59d Compare May 12, 2026 07:54
@gasbytes gasbytes marked this pull request as ready for review May 12, 2026 08:07
@gasbytes gasbytes requested a review from danielinux May 12, 2026 08:11
@gasbytes gasbytes assigned danielinux and unassigned gasbytes May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants