The assumption in ipsec4_process_packet() that the payload may be
only IPv4 is wrong, so check the IP version before mangling the payload header.
This commit is contained in:
parent
93b8d53c09
commit
b01e3d0802
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=268083
@ -498,9 +498,11 @@ ipsec4_process_packet(
|
||||
goto bad;
|
||||
}
|
||||
ip = mtod(m, struct ip *);
|
||||
ip->ip_len = htons(m->m_pkthdr.len);
|
||||
ip->ip_sum = 0;
|
||||
ip->ip_sum = in_cksum(m, ip->ip_hl << 2);
|
||||
if (ip->ip_v == IPVERSION) {
|
||||
ip->ip_len = htons(m->m_pkthdr.len);
|
||||
ip->ip_sum = 0;
|
||||
ip->ip_sum = in_cksum(m, ip->ip_hl << 2);
|
||||
}
|
||||
|
||||
/* Encapsulate the packet */
|
||||
error = ipip_output(m, isr, &mp, 0, 0);
|
||||
|
Loading…
Reference in New Issue
Block a user