]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
ipsec: Improve validation of PMTU
authorKornel Dulęba <kd@FreeBSD.org>
Wed, 27 Jul 2022 14:12:34 +0000 (16:12 +0200)
committerKornel Dulęba <kd@FreeBSD.org>
Wed, 27 Jul 2022 14:12:34 +0000 (16:12 +0200)
commit863871d369f8deb687aafa26599d93a6ef7c5e41
tree1aee18553e5eb0d4013611368bfcc51ab5dc7bb9
parent82042465c3b5477fc4f44be36077eab11b6b511b
ipsec: Improve validation of PMTU

Currently there is no upper bound on the PMTU value that is accepted.
Update hostcache only if the new pmtu is smaller than the current entry
and the link MTU.

Approved by: mw(mentor)
Sponsored by: Stormshield
Obtained from: Semihalf
Differential Revision: https://reviews.freebsd.org/D35872
sys/netipsec/ipsec_input.c