diff options
| author | maxv <maxv@NetBSD.org> | 2018-05-01 05:42:26 +0000 |
|---|---|---|
| committer | maxv <maxv@NetBSD.org> | 2018-05-01 05:42:26 +0000 |
| commit | 5db55268002c3eb07a095389d458831c7c7dadc3 (patch) | |
| tree | f9e5c3c2627dd100544eb48b570500066565b90a /sys/dev/microcode/tools | |
| parent | 5d1a469eb6e2017604d31673d9218b88c39a8a68 (diff) | |
Fix the checks in compute_ipsec_pos, otherwise m_copydata could crash. I
already fixed half of the problem two months ago in rev1.67, back then I
thought it was not triggerable because each packet we emit is guaranteed
to have correctly formed IPv6 options; but it is actually triggerable via
IPv6 forwarding, we emit a packet we just received, and we don't sanitize
its options before invoking IPsec.
Since it would be wrong to just stop the iteration and continue the IPsec
processing, allow compute_ipsec_pos to fail, and when it does, drop the
packet entirely.
Diffstat (limited to 'sys/dev/microcode/tools')
0 files changed, 0 insertions, 0 deletions
