<feed xmlns='http://www.w3.org/2005/Atom'>
<title>accel-ppp.git/accel-pppd/ipv6, branch sstp-alloc-invariant</title>
<subtitle>High performance PPTP/L2TP/SSTP/PPPoE/IPoE server for Linux (mirror of https://github.com/accel-ppp/accel-ppp.git)
</subtitle>
<id>https://git.amelek.net/accel-ppp/accel-ppp.git/atom?h=sstp-alloc-invariant</id>
<link rel='self' href='https://git.amelek.net/accel-ppp/accel-ppp.git/atom?h=sstp-alloc-invariant'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/'/>
<updated>2026-07-06T22:41:01+00:00</updated>
<entry>
<title>ipv6: fix NULL deref and OOB read in dnssl/AFTR-Name config parsing</title>
<updated>2026-07-06T22:41:01+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2026-07-06T22:38:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=d8273ebd5232f038a4775fe2ad55203a8be11a57'/>
<id>urn:sha1:d8273ebd5232f038a4775fe2ad55203a8be11a57</id>
<content type='text'>
add_dnssl() in nd.c and dhcpv6.c, and its copy add_aftr_gw() in
dhcpv6.c, call strlen(val) before the "if (!val)" guard, so a dnssl
option without a value crashes on config load before the check is
ever reached (also reported by cppcheck: "Either the condition '!val'
is redundant or there is possible null pointer dereference").

Moving strlen() after the guard is not enough: an empty value such as
a bare "dnssl=" or "aftr-gw=" passes the NULL check with n == 0 and
the following "val[n - 1]" reads one byte before the string.

Reject both NULL and empty values before taking the length.

Note these functions are only reached from the config parser (the
[ipv6-dns] section and the ipv6-dhcp "aftr-gw" option) at startup or
on config reload; nothing from received packets flows into them. So
this is a robustness fix for invalid/malformed configuration files
(local DoS at worst), not a remotely triggerable issue.

The NULL-check ordering in add_dnssl() was originally fixed by
[anp/hsw] in PR #13; this extends it to empty values and to the same
pattern in add_aftr_gw().

Co-authored-by: [anp/hsw] &lt;sysop@880.ru&gt;
</content>
</entry>
<entry>
<title>dhcpv6: validate AFTR name formatting</title>
<updated>2026-06-23T14:36:34+00:00</updated>
<author>
<name>Denys Fedoryshchenko</name>
<email>denys.f@collabora.com</email>
</author>
<published>2026-06-23T14:33:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=3004db8bb2f3f867d521f2378a2c1df72412be24'/>
<id>urn:sha1:3004db8bb2f3f867d521f2378a2c1df72412be24</id>
<content type='text'>
</content>
</entry>
<entry>
<title>netlink: Added VRF support</title>
<updated>2026-01-30T03:25:54+00:00</updated>
<author>
<name>Andrii Melnychenko</name>
<email>a.melnychenko@vyos.io</email>
</author>
<published>2026-01-07T12:14:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=d4f230af1cc31447289a7e30640a471a818cfd69'/>
<id>urn:sha1:d4f230af1cc31447289a7e30640a471a818cfd69</id>
<content type='text'>
Added VRF support to the iproute routines.
Updated iproute* calls in the ipoe, radius, and dhcpv6 code.

Signed-off-by: Andrii Melnychenko &lt;a.melnychenko@vyos.io&gt;
</content>
</entry>
<entry>
<title>ipv6: Add DHCPv6 Confirm processing</title>
<updated>2024-12-12T20:42:38+00:00</updated>
<author>
<name>Dmitriy Eshenko</name>
<email>dmitriy.eshenko@accel-ppp.org</email>
</author>
<published>2024-12-12T20:42:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=6e6f8211185846ab37be6a0cf68557112053dfb1'/>
<id>urn:sha1:6e6f8211185846ab37be6a0cf68557112053dfb1</id>
<content type='text'>
</content>
</entry>
<entry>
<title>ipv6_dhcp: Add RFC6334 AFTR-Name option support</title>
<updated>2024-05-05T11:52:31+00:00</updated>
<author>
<name>Luiz Amaral</name>
<email>email@luiz.eng.br</email>
</author>
<published>2024-05-05T11:52:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=9eff72d3a5bdebd6ee41b1891460ca6c5a2fb0fb'/>
<id>urn:sha1:9eff72d3a5bdebd6ee41b1891460ca6c5a2fb0fb</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T72: Fix compilations warnings for unaligned variable access</title>
<updated>2022-10-22T12:11:29+00:00</updated>
<author>
<name>Volodymyr Huti</name>
<email>volodymyr.huti@gmail.com</email>
</author>
<published>2022-10-13T11:20:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=6e5f9980a8a71015a228279e07970621d23c7b35'/>
<id>urn:sha1:6e5f9980a8a71015a228279e07970621d23c7b35</id>
<content type='text'>
- IPoE/DHCP4: Specify minimal suitable alignment explicitly.
  We need to guarantee 2 byte alignment for the `hdr` pointer in
    `ip_csum(uint16_t *buf)` calculation
- PPPOE: Suppress false-positive warning for `sockaddr_pppox`.
  Similiar issue: https://github.com/kernelslacker/trinity/pull/40
- Introduce tmp variables to avoid alignment issues for SSTP/DHCPv6

For additional details:
https://phabricator.accel-ppp.org/T72

Signed-off-by: Volodymyr Huti &lt;v.huti@vyos.io&gt;
</content>
</entry>
<entry>
<title>Merge pull request #54 from telirebarry/fix-ipv6-netns</title>
<updated>2022-07-27T09:36:44+00:00</updated>
<author>
<name>xebd</name>
<email>xeb@mail.ru</email>
</author>
<published>2022-07-27T09:36:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=61ba3af1d1e204df000fd78add1dbe1139eb5df7'/>
<id>urn:sha1:61ba3af1d1e204df000fd78add1dbe1139eb5df7</id>
<content type='text'>
Fix ipv6 inside netns</content>
</entry>
<entry>
<title>ipv6_dhcp:change log message with appropriate file name</title>
<updated>2022-07-05T08:22:26+00:00</updated>
<author>
<name>Telire Barry</name>
<email>t.barry@alphalink.fr</email>
</author>
<published>2022-06-24T09:27:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=a184c94f3f8c8e8bc56ebd9527646567a06e8e59'/>
<id>urn:sha1:a184c94f3f8c8e8bc56ebd9527646567a06e8e59</id>
<content type='text'>
This commit proposes to modify the log message in dhcpv6.c to include
the correct file name. It avoids confusion when reading the logs
</content>
</entry>
<entry>
<title>ipv6_dhcp: fix create ipv6 socket inside netns</title>
<updated>2022-06-22T15:12:32+00:00</updated>
<author>
<name>Telire Barry</name>
<email>t.barry@alphalink.fr</email>
</author>
<published>2022-06-22T15:12:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=26270ec4e1057977be1e45da1c86217e1b6357f6'/>
<id>urn:sha1:26270ec4e1057977be1e45da1c86217e1b6357f6</id>
<content type='text'>
This fix allow to create the socket inside the netns for ipv6-dhcp module.
</content>
</entry>
<entry>
<title>ipv6_nd: fix ipv6 auto-configuration in netns</title>
<updated>2022-06-22T14:55:48+00:00</updated>
<author>
<name>Telire Barry</name>
<email>t.barry@alphalink.fr</email>
</author>
<published>2022-06-22T14:55:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/accel-ppp/accel-ppp.git/commit/?id=671c54b1876b2b46a37cc587a114a2b5cf9ed2d0'/>
<id>urn:sha1:671c54b1876b2b46a37cc587a114a2b5cf9ed2d0</id>
<content type='text'>
ipv6 auto-configuration generate error  when link is
terminated inside netns. The error message is :
"ipv6_nd: setsockopt(SO_BINDTODEVICE): No such device"

This error is generated because socket is not created inside
the netns but it’s created in the default netns.
This fix allow to create the socket in the right place.

to propose this fix, i was inspired by :
issue : https://phabricator.accel-ppp.org/T68
commit : https://github.com/accel-ppp/accel-ppp/commit/f1d616d91914be493b6a32a96323fa871733f8e0
</content>
</entry>
</feed>
