CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/18 19:44:43
Modified files:
sys/arch/amd64/amd64: Tag: OPENBSD_8_0 aesni.c
sys/arch/octeon/dev: Tag: OPENBSD_8_0 octcrypto.c
Log message:
Fix overflow in hardware accelerated AES-GMAC crypto.
On amd64 using AES-NI or on octeon with crypto coprocessor, an
unauthenticated ESP packet that matches a configured AES-GMAC
security association could copy almost 64 KB of attacker-controlled
data into a 4096-byte kernel heap buffer.
from Acts1631; from bluhm@; OK visa@ hshoexer@
this is errata/8.0/003_aesgmac.patch.sig
