diff options
| author | maxv <maxv@NetBSD.org> | 2018-02-08 06:50:38 +0000 |
|---|---|---|
| committer | maxv <maxv@NetBSD.org> | 2018-02-08 06:50:38 +0000 |
| commit | 6d881e1e3f99778d93f231d3e0883769c1167cb4 (patch) | |
| tree | 66c52737021b77fc298ff6fcce9fe414f933e15b /sys/dev/microcode | |
| parent | 703c5cd6880fa059c7edc2b94e46d72f2b9cf6e8 (diff) | |
Fix three pretty bad mistakes in NAT-T:
* If we got a keepalive packet, we need to call m_freem, not m_free.
Here the next mbufs in the chain are not freed. Seems easy to remotely
DoS the system by sending fragmented keepalives in a loop.
* If !ipsec_used, free the mbuf.
* In udp_input, we need to update 'uh', because udp4_realinput may have
modified the chain. Perhaps we also need to re-enforce alignment, so
add an XXX.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions
