CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/18 19:03:17
Modified files:
sys/arch/amd64/amd64: aesni.c
sys/arch/octeon/dev: octcrypto.c
Log message:
Fix overflow in hardware accelerated AES-GMAC crypto.
On amd64 using AES-NI or on octeon with crypto coprocessor, an
unauthenticated ESP packet that matches a configured AES-GMAC
security association could copy almost 64 KB of attacker-controlled
data into a 4096-byte kernel heap buffer.
from Acts1631; OK visa@ hshoexer@
