]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
Port r329561 to stable/10. There were structural changes preventing MFC.
authorgordon <gordon@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 7 Mar 2018 05:47:48 +0000 (05:47 +0000)
committergordon <gordon@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 7 Mar 2018 05:47:48 +0000 (05:47 +0000)
commitdc6c376f4987b1710427c4439ca6ec1ec5201f30
treed9ccab9f23754ae63da39e20c21e151ad902c51b
parent3c2c62dc098065250d0c384cf13338ce0ddf231e
Port r329561 to stable/10. There were structural changes preventing MFC.

Check packet length to not make an out of bounds access. Also, save ah_nxt
value to use later, since the ah pointer can become invalid.

Reviewed by: ae@
Approved by: so
Security: CVE-2018-6916
Security: FreeBSD-SA-18:01.ipsec

git-svn-id: svn://svn.freebsd.org/base/stable/10@330565 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/netipsec/xform_ah.c