On Thu, Nov 17, 2016 at 06:17:32AM -0700, Alexander Bluhm wrote: > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2016/11/17 06:17:32 > > Modified files: > sys/net : pf.c > > Log message: > The pf fragment reassembly code accepted IPv6 hop-by-hop headers > after fragment headers. Add an extra check that the hop-by-hop > header is always the first extension header after the IPv6 header. > Found by Antonios Atlasis; OK sthen@ mpi@
and OK sashan@
