HardenedBSD/tests/sys/netpfil/pf
Kristof Provost b9f0dbc3d0 pf tests: ensure we don't confuse different ICMP types
When creating a state for ICMP (v4 or v6) packets we only used the ID, which
means that we could confuse different ICMP types. For example, if we allowed
neighbour discovery but not ICMPv6 echo requests an ND packet could create a
state that the echo request would match.

Test that this is now fixed.

Reported by:	Enrico Bassetti <e.bassetti@tudelft.nl>
MFC after:	1 day
Sponsored by:	Rubicon Communications, LLC ("Netgate")
2024-07-29 19:42:26 +02:00
..
ioctl
altq.sh
anchor.sh
CVE-2019-5597.py
CVE-2019-5598.py
daytime_inetd.conf
debug.sh
divapp.c
divert-to.sh
dup.sh
echo_inetd.conf
ether.sh
forward.sh
frag6.py
frag-overindex.py
frag-overlimit.py
frag-overreplace.py
fragcommon.py
fragmentation_compat.sh
fragmentation_no_reassembly.sh
fragmentation_pass.sh
get_state.sh
icmp6.sh
icmp.sh
if_enc.sh
killstate.sh
limits.sh
loginterface.sh
macro.sh
Makefile
Makefile.depend
map_e.sh
match.sh
modulate.sh
names.sh
nat66.py
nat.sh
pass_block.sh
pflog.sh
pflow.sh
pfsync_defer.py
pfsync.sh
pft_ether.py
pft_read_ipfix.py
prio.sh
proxy.sh
rdr.sh
ridentifier.sh
route_to.sh
rtable.sh
rules_counter.sh
scrub_compat.sh
scrub_pass.sh
scrub.sh
sctp.py
sctp.sh
set_skip.sh
set_tos.sh
src_track.sh
status.sh
syncookie.sh
synproxy.sh
table.sh
tcp.sh
tos.sh
utils.subr