summaryrefslogtreecommitdiff
path: root/sys/dev/microcode
diff options
context:
space:
mode:
authormaxv <maxv@NetBSD.org>2018-02-08 06:50:38 +0000
committermaxv <maxv@NetBSD.org>2018-02-08 06:50:38 +0000
commit6d881e1e3f99778d93f231d3e0883769c1167cb4 (patch)
tree66c52737021b77fc298ff6fcce9fe414f933e15b /sys/dev/microcode
parent703c5cd6880fa059c7edc2b94e46d72f2b9cf6e8 (diff)
Fix three pretty bad mistakes in NAT-T:
* If we got a keepalive packet, we need to call m_freem, not m_free. Here the next mbufs in the chain are not freed. Seems easy to remotely DoS the system by sending fragmented keepalives in a loop. * If !ipsec_used, free the mbuf. * In udp_input, we need to update 'uh', because udp4_realinput may have modified the chain. Perhaps we also need to re-enforce alignment, so add an XXX.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions