summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_input.c
diff options
context:
space:
mode:
authorMark Johnston <markj@FreeBSD.org>2023-03-06 20:06:00 +0000
committerMark Johnston <markj@FreeBSD.org>2023-03-06 20:06:00 +0000
commit713264f6b8bc5f927dd52cf8ffcccfa397034fec (patch)
tree2ed07fa4071cafaac14b871685d54277c56ca62a /sys/netinet/ip_input.c
parent1be25bdb730ff07355cd6f5cb087d58e506c5519 (diff)
Diffstat (limited to 'sys/netinet/ip_input.c')
-rw-r--r--sys/netinet/ip_input.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index b8fb3861c5b8..5de09a32a2f5 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -519,6 +519,11 @@ ip_input(struct mbuf *m)
goto bad;
}
}
+ /* The unspecified address can appear only as a src address - RFC1122 */
+ if (__predict_false(ntohl(ip->ip_dst.s_addr) == INADDR_ANY)) {
+ IPSTAT_INC(ips_badaddr);
+ goto bad;
+ }
if (m->m_pkthdr.csum_flags & CSUM_IP_CHECKED) {
sum = !(m->m_pkthdr.csum_flags & CSUM_IP_VALID);