more strict sanity check for ESP tail
Obtained from: KAME
This commit is contained in:
parent
e229cfa536
commit
b18521ee3b
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=121335
@ -332,7 +332,7 @@ esp4_input(m, off)
|
||||
taillen = esptail.esp_padlen + sizeof(esptail);
|
||||
|
||||
if (m->m_pkthdr.len < taillen ||
|
||||
m->m_pkthdr.len - taillen < hlen) { /* ? */
|
||||
m->m_pkthdr.len - taillen < off + esplen + ivlen + sizeof(esptail)) {
|
||||
ipseclog((LOG_WARNING,
|
||||
"bad pad length in IPv4 ESP input: %s %s\n",
|
||||
ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav)));
|
||||
|
Loading…
Reference in New Issue
Block a user