ipsec: Improve validation of PMTU
ClosedPublic
Actions

Authored by kd on Jul 21 2022, 7:24 AM.

Tags

None

Referenced Files

	F166317852: D35872.id108600.diff
	Wed, Aug 12, 9:11 PM

	F166306372: D35872.id.diff
	Wed, Aug 12, 7:22 PM

	Unknown Object (File)
	Tue, Aug 11, 9:32 PM

	Unknown Object (File)
	Tue, Aug 11, 4:40 PM

	Unknown Object (File)
	Mon, Aug 10, 6:28 PM

	Unknown Object (File)
	Mon, Aug 10, 5:00 PM

	Unknown Object (File)
	Mon, Aug 10, 6:23 AM

	Unknown Object (File)
	Sun, Aug 9, 6:23 PM

View All Files

Subscribers

glebius

imp

Details

Reviewers

mw
emaste
markj
ae
melifaro

Group Reviewers

network

Commits

rG863871d369f8: ipsec: Improve validation of PMTU

Summary

Currently there is no upper bound on the PMTU value that is accepted.
Update hostcache only if the new pmtu is smaller than the current entry and the link MTU.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kd created this revision.Jul 21 2022, 7:24 AM

Herald added a subscriber: glebius. · View Herald TranscriptJul 21 2022, 7:24 AM

kd requested review of this revision.Jul 21 2022, 7:24 AM

mw accepted this revision.Jul 27 2022, 12:11 PM

This revision is now accepted and ready to land.Jul 27 2022, 12:11 PM

Closed by commit rG863871d369f8: ipsec: Improve validation of PMTU (authored by kd). · Explain WhyJul 27 2022, 2:15 PM

This revision was automatically updated to reflect the committed changes.

kd added a commit: rG863871d369f8: ipsec: Improve validation of PMTU.

Herald added a subscriber: imp. · View Herald TranscriptJul 27 2022, 2:15 PM

Revision Contents
Changeset List

Path

Size

sys/

netipsec/

ipsec_input.c

11 lines

Diff 108600

View Options

sys/netipsec/ipsec_input.c

ipsec: Improve validation of PMTUClosedPublicActions