News for hackers. Stuff that matters.
Re:Remote execution bug in BSD ping by pajko on Thursday December 01, 2022 @07:50AM (#33815579)
Seems like so. The fix [0] mainly replaces memcpys added by a former commit [1], which seems to be the main difference between the FreeBSD and Apple variant of ping [2], but probably that's not the source of the bug. What smells in there is 'hlen = ip->ip_hl << 2'

[0] https://github.com/freebsd/freebsd-src/commit/46d7b45a267b3d...

[1] https://github.com/freebsd/freebsd-src/commit/d9cacf605e2ac0...

[2] https://opensource.apple.com/source/network_cmds/network_cmd...

There are no comments on this comment yet.