ipsec: Improve validation of PMTU
ClosedPublic
Actions

Authored by kd on Jul 21 2022, 7:24 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Jun 8, 11:52 PM

	Unknown Object (File)
	Thu, May 21, 6:01 PM

	Unknown Object (File)
	Wed, May 20, 9:08 AM

	Unknown Object (File)
	May 19 2026, 2:01 PM

	Unknown Object (File)
	May 18 2026, 5:43 PM

	Unknown Object (File)
	May 18 2026, 7:02 AM

	Unknown Object (File)
	May 16 2026, 8:14 PM

	Unknown Object (File)
	May 15 2026, 7:26 PM

View All Files

Subscribers

glebius

imp

Details

Reviewers

mw
emaste
markj
ae
melifaro

Group Reviewers

network

Commits

rG863871d369f8: ipsec: Improve validation of PMTU

Summary

Currently there is no upper bound on the PMTU value that is accepted.
Update hostcache only if the new pmtu is smaller than the current entry and the link MTU.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kd created this revision.Jul 21 2022, 7:24 AM

Herald added a subscriber: glebius. · View Herald TranscriptJul 21 2022, 7:24 AM

kd requested review of this revision.Jul 21 2022, 7:24 AM

mw accepted this revision.Jul 27 2022, 12:11 PM

This revision is now accepted and ready to land.Jul 27 2022, 12:11 PM

Closed by commit rG863871d369f8: ipsec: Improve validation of PMTU (authored by kd). · Explain WhyJul 27 2022, 2:15 PM

This revision was automatically updated to reflect the committed changes.

kd added a commit: rG863871d369f8: ipsec: Improve validation of PMTU.

Herald added a subscriber: imp. · View Herald TranscriptJul 27 2022, 2:15 PM

Revision Contents
Changeset List

Path

Size

sys/

netipsec/

ipsec_input.c

11 lines

Diff 108600

View Options

sys/netipsec/ipsec_input.c

ipsec: Improve validation of PMTUClosedPublicActions