CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2011/07/07 14:46:37
Modified files:
sys/net : pf.c pf_norm.c pfvar.h
Log message:
There were two loops in pf_setup_pdesc() and pf_normalize_ip6()
walking over the IPv6 header chain. Merge them into one loop,
adjust some length checks and fix IPv6 jumbo option handling. Also
allow strange but legal IPv6 packets with plen=0 passing through
pf. IPv6 jumbo packets still get dropped.
testing dhill@; ok mcbride@ henning@
