ip,ip6: bound and validate what the local delivery nodes read - #743

Merged

christophefontaine merged 6 commits into

maxime-leroy:icmp-hardening

Sep 16, 2026

Commits on Sep 16, 2026

ip,ip6: check the payload length before the nodes read with it
maxime-leroy
committed
43bb85d
ip6: validate the ICMPv6 length and checksum
maxime-leroy
committed
7f9ee1f
ip6: set the packet type for every locally delivered protocol
maxime-leroy
committed
b19f4b4
ip,ip6: validate a quoted datagram in the ICMP input nodes
maxime-leroy
committed
de3b2d9
ip6: require a full neighbour solicitation before reading its target
maxime-leroy
committed
220dafb
l4: check the L4 header is there before reading it
maxime-leroy
committed
7fb9957