CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/21 00:03:35
Modified files:
sbin/isakmpd : crypto.c dpd.c exchange.c exchange.h message.c
x509.c
Log message:
isakmpd(8): Fix various remotely triggerable crashes
- Only accept authenticated DPD notifications with a well-formed payload.
- Check the notify payload length against the SPI size.
- Fail AES key setup on invalid key lengths.
- Reject encrypted messages whose length is zero or not a multiple
of the cipher block size.
- Do not free the caller's certificate in x509_cert_get_key().
- Do not run exchanges that are already finalized.
with markus@, some input from tb@, ok deraadt@
