When processing IPsec AH packets with IP options or IPv6 extension
authorbluhm <bluhm@openbsd.org>
Thu, 1 Feb 2018 21:06:31 +0000 (21:06 +0000)
committerbluhm <bluhm@openbsd.org>
Thu, 1 Feb 2018 21:06:31 +0000 (21:06 +0000)
commitdf9b9db2c3d93a3b2fa67316cad3e2df6eeb53f5
treee1606885193e709576809a14c5b8a3865e3066f9
parent84dba573397ea8bcda50e94a7b54ab660bc4147d
When processing IPsec AH packets with IP options or IPv6 extension
headers, check all lengths before accessing the values.
found by Maxime Villard; from NetBSD; with and OK markus@; OK patrick@
sys/netinet/ip_ah.c