ipsec: Improve validation of PMTU
ClosedPublic
Actions

Authored by kd on Jul 21 2022, 7:24 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Sat, Feb 28, 6:11 PM

	Unknown Object (File)
	Sat, Feb 28, 1:38 AM

	Unknown Object (File)
	Jan 31 2026, 11:31 AM

	Unknown Object (File)
	Jan 28 2026, 12:12 AM

	Unknown Object (File)
	Dec 31 2025, 1:39 AM

	Unknown Object (File)
	Dec 30 2025, 11:27 PM

	Unknown Object (File)
	Dec 30 2025, 7:38 AM

	Unknown Object (File)
	Dec 29 2025, 11:35 PM

View All Files

Subscribers

glebius

imp

Details

Reviewers

mw
emaste
markj
ae
melifaro

Group Reviewers

network

Commits

rG863871d369f8: ipsec: Improve validation of PMTU

Summary

Currently there is no upper bound on the PMTU value that is accepted.
Update hostcache only if the new pmtu is smaller than the current entry and the link MTU.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kd created this revision.Jul 21 2022, 7:24 AM

Herald added a subscriber: glebius. · View Herald TranscriptJul 21 2022, 7:24 AM

kd requested review of this revision.Jul 21 2022, 7:24 AM

mw accepted this revision.Jul 27 2022, 12:11 PM

This revision is now accepted and ready to land.Jul 27 2022, 12:11 PM

Closed by commit rG863871d369f8: ipsec: Improve validation of PMTU (authored by kd). · Explain WhyJul 27 2022, 2:15 PM

This revision was automatically updated to reflect the committed changes.

kd added a commit: rG863871d369f8: ipsec: Improve validation of PMTU.

Herald added a subscriber: imp. · View Herald TranscriptJul 27 2022, 2:15 PM

Revision Contents
Changeset List

Path

Size

sys/

netipsec/

ipsec_input.c

11 lines

Diff 108600

View Options

sys/netipsec/ipsec_input.c

ipsec: Improve validation of PMTUClosedPublicActions