Package: tayga
Version: 0.9.2-8
Severity: wishlist
Hello,
I tested latest 0.9.2-10 release with the recent RFC8215 patch, and I
just wanted to provide a bit more strict but more correct check on the
Well-known prefix & Local-use prefix validation. See patch attached.
Regards.
-- Benjamin
-- System Information:
Debian Release: 12.8
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.9.10+bpo-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages tayga depends on:
ii init-system-helpers 1.65.2
ii libc6 2.36-9+deb12u9
ii sysvinit-utils [lsb-base] 3.06-4
tayga recommends no packages.
tayga suggests no packages.
-- no debconf information
>From 067f30cb19b9cb0897b7676d5ff225c80d7bc4f5 Mon Sep 17 00:00:00 2001
From: Benjamin Cama <ben...@dolka.fr>
Date: Wed, 18 Dec 2024 12:19:31 +0100
Subject: [PATCH] Use more specific WKPF/47 prefix validation
---
debian/patches/0012-rfc8125-local-prefix.patch | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/debian/patches/0012-rfc8125-local-prefix.patch
b/debian/patches/0012-rfc8125-local-prefix.patch
index 07f64a2..be02c3b 100644
--- a/debian/patches/0012-rfc8125-local-prefix.patch
+++ b/debian/patches/0012-rfc8125-local-prefix.patch
@@ -19,8 +19,8 @@ Last-Update: 2024-07-12
{
- /* Well-known prefix for NAT64 */
- if (a->s6_addr32[0] == WKPF && !a->s6_addr32[1] && !a->s6_addr32[2])
-+ /* Well-known prefix for NAT64, plus Local-Use Space */
-+ if (a->s6_addr32[0] == WKPF)
++ /* Well-known prefix for NAT64, plus Local-Use Space, i.e. WKPF/47 cf.
RFC8215 */
++ if (a->s6_addr32[0] == WKPF && !(a->s6_addr32[1] & htonl(0xfffe0000)))
return 0;
+
--
2.39.5
