lwIP - A Lightweight TCP/IP stack - Patches: patch #9170, ipv4/ipv6: restrict...
You are not allowed to post comments on this tracker with your current authentication level.
patch #9170: ipv4/ipv6: restrict loopback-destined traffic
Submitter: | David van Moolenbroek <dcvmoole> | ||
Submitted: | Tue 22 Nov 2016 07:10:59 PM UTC | ||
Category: | None | Priority: | 5 - Normal |
Status: | Done | Privacy: | Public |
Assigned to: | goldsimon | Open/Closed: | Closed |
Planned Release: | None |
Tue 22 Nov 2016 07:53:04 PM UTC, comment #1: |
Simon Goldschmidt <goldsimon> |
Tue 22 Nov 2016 07:10:59 PM UTC, original submission:
For your consideration. Commit message reproduced below. While the same check could be implemented with input hooks, I believe that from a "security by default" point of view it makes sense to implement this in lwIP itself. FWIW, I have verified (pre+post) that at least on my configuration, the patch indeed has the intended effect. As a bit of background, for one example (which admittedly I found with a google search) of why this is relevant for security, see https://googleprojectzero.blogspot.nl/2015/01/finding-and-exploiting-ntpd.html .
|
David van Moolenbroek <dcvmoole> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 4 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2016-11-22 | goldsimon | Status | None | Done | |
Assigned to | None | goldsimon | |||
Open/Closed | Open | Closed | |||
2016-11-22 | dcvmoole | Attached File | - | Added 0001-ipv4-ipv6-restrict-loopback-destined-traffic.patch, #39047 |
Powered by Savane 3.13-4b48.
Corresponding source code
Great, thanks for the patch!