From 6612db12d56c68fff3e56ca4ea8c41d9d55c12e4 Mon Sep 17 00:00:00 2001 From: Jan Kiszka Date: Wed, 8 Feb 2012 10:05:45 +0100 Subject: slirp: Prevent sending ICMP error replies to source-only addresses This triggered the related assert in arp_table_search. Signed-off-by: Jan Kiszka --- slirp/ip_icmp.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'slirp/ip_icmp.c') diff --git a/slirp/ip_icmp.c b/slirp/ip_icmp.c index 4b43994dbc..5dbf21da9d 100644 --- a/slirp/ip_icmp.c +++ b/slirp/ip_icmp.c @@ -262,6 +262,11 @@ icmp_error(struct mbuf *msrc, u_char type, u_char code, int minsize, #endif if(ip->ip_off & IP_OFFMASK) goto end_error; /* Only reply to fragment 0 */ + /* Do not reply to source-only IPs */ + if ((ip->ip_src.s_addr & htonl(~(0xf << 28))) == 0) { + goto end_error; + } + shlen=ip->ip_hl << 2; s_ip_len=ip->ip_len; if(ip->ip_p == IPPROTO_ICMP) { -- cgit v1.2.3