Page MenuHomeFreeBSD
Files F106115212

D22557.diff
No OneTemporary
Actions

D22557.diff
View Options

Index: head/sys/netipsec/xform_esp.c
===================================================================
--- head/sys/netipsec/xform_esp.c
+++ head/sys/netipsec/xform_esp.c
@@ -614,6 +614,13 @@
}
}
+ /*
+ * RFC4303 2.6:
+ * Silently drop packet if next header field is IPPROTO_NONE.
+ */
+ if (lastthree[2] == IPPROTO_NONE)
+ goto bad;
+
/* Trim the mbuf chain to remove trailing authenticator and padding */
m_adj(m, -(lastthree[1] + 2));

File Metadata

Mime Type
text/plain
Expires
Thu, Dec 26, 3:42 PM (11 h, 54 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
15605774
Default Alt Text
D22557.diff (457 B)

Event Timeline