CVSROOT: /cvs Module name: src Changes by: [email protected] 2016/11/17 06:17:32
Modified files:
sys/net : pf.c
Log message:
The pf fragment reassembly code accepted IPv6 hop-by-hop headers
after fragment headers. Add an extra check that the hop-by-hop
header is always the first extension header after the IPv6 header.
Found by Antonios Atlasis; OK sthen@ mpi@
