CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-05-13 16:57:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
nmap/libnetutil
History
dmiller 5d726c7733 Handle ICMPv6 packets without a body 
Two issues here: First, IP protocol scan can send packets with protocol
58 (ICMPv6) even over IPv4. This led to a bad interaction where the
packet was created (in build_protoscan_packet) without a data payload,
but setIP tried to set the packet's Identifier field (present in both
ICMPv6 and ICMP Echo Request packets), leading to a heap buffer
overflow. Instead, we now only try to set this identifier when the IP
version matches the ICMP version, indicating that we set the data
payload.

The other issue was a out-of-bounds read while packet tracing when an
ICMPv6 packet without a payload was sent or received, due to trying to
read the type and code. Now we check that the data length is sufficient
to contain an ICMPv6 header before attempting to read one.

Credit LLVM/Clang's AddressSanitizer with catching these bugs.
2016-07-28 05:11:35 +00:00
..
ApplicationLayerElement.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ARPHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ARPHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
DataLinkLayerElement.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
DestOptsHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
DestOptsHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
EthernetHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
EthernetHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
FragmentHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
FragmentHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
HopByHopHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
HopByHopHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv4Header.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv4Header.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6Header.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6Header.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6Option.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6Option.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6RRBody.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
ICMPv6RRBody.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
IPv4Header.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
IPv4Header.h Revert r35943: causing segv crashes in IPv6 OS scan 2016-07-27 19:49:13 +00:00
IPv6ExtensionHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
IPv6Header.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
IPv6Header.h Revert r35943: causing segv crashes in IPv6 OS scan 2016-07-27 19:49:13 +00:00
libnetutil.vcxproj Update platform toolset to remove XP compatibility 2016-06-04 02:46:11 +00:00
Makefile.in Get rid of npacket_debug (dead code). 2013-02-14 14:34:52 +00:00
netutil.cc Handle ICMPv6 packets without a body 2016-07-28 05:11:35 +00:00
netutil.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
NetworkLayerElement.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
NetworkLayerElement.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
npacket.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
PacketElement.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
PacketElement.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
PacketParser.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
PacketParser.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
RawData.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
RawData.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
RoutingHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
RoutingHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
TCPHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
TCPHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
TransportLayerElement.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
TransportLayerElement.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00
UDPHeader.cc Bump date in copyright headers 2016-04-04 15:38:44 +00:00
UDPHeader.h Bump date in copyright headers 2016-04-04 15:38:44 +00:00