CVSROOT:        /cvs
Module name:    src
Changes by:     bl...@cvs.openbsd.org   2025/03/04 08:11:30

Modified files:
        sys/net        : if_sec.c if_sec.h 
        sys/netinet    : ipsec_input.c 

Log message:
Pass struct netstack to sec_input().

Kernel crashed in route6_cache() due to bogous netstack.
ipsec_common_input_cb() was called with netstack pointer NULL, but
in ipv6_input() the pointer was 1.  In between lies sec_input()
that was called without netstack pointer, but passed an arbitrary
value to if_vinput().  There was a parameter missing in its prototype.
The buggy code did compile due to a missing include file.

crash reported by Mikolaj Kucharski; OK claudio@

Reply via email to