CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/07 14:01:17
Modified files:
sys/net : pf.c
Log message:
In pf(4) check extension header length.
pf_walk_header6() advances the packet offset for each IPv6 extension
header. It was not checked that this does not exceed the packet
length if no next header was processed. When used with af-to rules,
this could trigger a panic: m_copydata: null mbuf.
from Acts1631; OK henning@ sashan@
