icmp6: rate limit our echo replies

The generation of ICMP6_ECHO_REPLY bypasses icmp6_error(), thus rate
limit was not applied.

Reviewed by:		tuexen, zlei
Differential Revision:	https://reviews.freebsd.org/D44480

This commit is contained in:

Gleb Smirnoff

2024-03-24 09:13:23 -07:00

parent c6c96aaba8

commit 32aeee8ce7

1 changed files with 2 additions and 0 deletions

									
										sys/netinet6/icmp6.c
									
		+2
		
												View File
												
				@@ -546,6 +546,8 @@ icmp6_input(struct mbuf **mp, int *offp, int proto)

						icmp6_ifstat_inc(ifp, ifs6_in_echo);

						if (code != 0)

							goto badcode;

						if (icmp6_ratelimit(&ip6->ip6_src, ICMP6_ECHO_REPLY, 0))

							break;

						if ((n = m_copym(m, 0, M_COPYALL, M_NOWAIT)) == NULL) {

							/* Give up remote */

							break;