[ip6] filter received packets with loopback addrs (#10998)

openthread · Dec 5, 2024 · 881f557 · 881f557
1 parent ee2d7d5
commit 881f557
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/core/net/ip6.cpp b/src/core/net/ip6.cpp
@@ -1086,6 +1086,11 @@ Error Ip6::HandleDatagram(OwnedPtr<Message> aMessagePtr, bool aIsReassembled)
 
     SuccessOrExit(error = header.ParseFrom(*aMessagePtr));
 
+    if (!aMessagePtr->IsOriginHostTrusted())
+    {
+        VerifyOrExit(!header.GetSource().IsLoopback() && !header.GetDestination().IsLoopback(), error = kErrorDrop);
+    }
+
     // Determine `forwardThread`, `forwardHost` and `receive`
     // based on the destination address.