News for hackers. Stuff that matters.

A comment on Remote execution bug in BSD ping.

Re:Remote execution bug in BSD ping by pajko on Thursday December 01, 2022 @07:21AM (#33815299)
Could MacOS be affected? A not insignificant part of the userland comes from FreeBSD.
[ Parent | on HN ]
Re:Remote execution bug in BSD ping by pajko on Thursday December 01, 2022 @07:50AM (#33815579)
Seems like so. The fix [0] mainly replaces memcpys added by a former commit [1], which seems to be the main difference between the FreeBSD and Apple variant of ping [2], but probably that's not the source of the bug. What smells in there is 'hlen = ip->ip_hl << 2'

[0] https://github.com/freebsd/freebsd-src/commit/46d7b45a267b3d...

[1] https://github.com/freebsd/freebsd-src/commit/d9cacf605e2ac0...

[2] https://opensource.apple.com/source/network_cmds/network_cmd...

[ Parent | on HN ]