CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2018/05/16 14:39:14
Modified files:
sys/netinet : Tag: OPENBSD_6_3 ipsec_output.c
Log message:
When walking the IPv6 header chain in IPsec output, check that the
next extension header is within the packet length. Also check at
the end that the IPv4 headers are not longer than the packet.
reported by Maxime Villard; from markus@ via NetBSD; OK mpi@
OpenBSD 6.3 errata 008
