CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]  2026/05/15 03:42:46

Modified files:
        sys/netinet6   : frag6.c 

Log message:
frag6_input(): must always decrement counter when dropping fragment

Currently frag6_input() does not decrement counter in one case:
- it is processing fragment with offset 0 which arrives after
the last fragment (fragment with max. offset)
- there are more IPv6 extension headers between IPv6 header
and IPv6 fragment header
- re-assembled packet exceeds IPV6_MAXPACKET size limit

if conditions above are met, then fragment gets dropped without
decrementing counters. This commit fixes that.

The issue was pointed out by Frank Denis.

OK bluhm@

Reply via email to