Patch-ID# 101587-01
Keywords: security icmp redirects ip panic mbuf point patch
Synopsis: SunOS 4.1.3_U1: security patch for mfree and icmp redirect 
Date: Feb/24/94

Solaris Release: 1.1.1A

SunOS Release: 4.1.3_U1A

Topic: mfree and icmp redirect security patch for ip_icmp.o

BugId's fixed with this patch: 1087460 1093937

Changes incorporated in this version: 1093937

Relevant Architecture: sparc
    NOTE: sun4, sun4c, sun4m

Patches which may conflict with this patch:

Obsoleted by:

Problem Description:

BUGID 1087460:  We free the same mbuf a second time.  This causes the mfree 
panic. Fixed in -01 version.

BUGID 1093937: The current fix will make your networked systems more 
resistant to attacks based on the spoofing of icmp messages, but may not 
prevent all forms of such attacks. This specific patch will not be
integrated in a future OS release, but other considerations to minimize
this bug will be reviewed for a future OS release.
  
Revision History:

INSTALL:

As root:

mv /sys/`arch -k`/OBJ/ip_icmp.o /sys/`arch -k`/OBJ/ip_icmp.o.fcs
cp `arch`/ip_icmp.o /sys/`arch -k`/OBJ

A new kernel will need to be made and installed.
Please refer to the system and networking administration manual
for details on building and installing a new kernel.