summaryrefslogtreecommitdiff
path: root/sys/dev/microcode
diff options
context:
space:
mode:
authormaxv <maxv@NetBSD.org>2018-05-01 05:42:26 +0000
committermaxv <maxv@NetBSD.org>2018-05-01 05:42:26 +0000
commit5db55268002c3eb07a095389d458831c7c7dadc3 (patch)
treef9e5c3c2627dd100544eb48b570500066565b90a /sys/dev/microcode
parent5d1a469eb6e2017604d31673d9218b88c39a8a68 (diff)
Fix the checks in compute_ipsec_pos, otherwise m_copydata could crash. I
already fixed half of the problem two months ago in rev1.67, back then I thought it was not triggerable because each packet we emit is guaranteed to have correctly formed IPv6 options; but it is actually triggerable via IPv6 forwarding, we emit a packet we just received, and we don't sanitize its options before invoking IPsec. Since it would be wrong to just stop the iteration and continue the IPsec processing, allow compute_ipsec_pos to fail, and when it does, drop the packet entirely.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions