d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

more strict sanity check for ESP tail

Browse Source 
Obtained from: KAME
This commit is contained in:
SUZUKI Shinsuke 2003-10-22 10:44:59 +00:00
parent e229cfa536
commit b18521ee3b
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=121335
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/netinet6/esp_input.c
View File

@ -332,7 +332,7 @@ esp4_input(m, off)
taillen = esptail.esp_padlen + sizeof(esptail);
if (m->m_pkthdr.len < taillen ||
m->m_pkthdr.len - taillen < hlen) { /* ? */
m->m_pkthdr.len - taillen < off + esplen + ivlen + sizeof(esptail)) {
ipseclog((LOG_WARNING,
"bad pad length in IPv4 ESP input: %s %s\n",
ipsec4_logpacketstr(ip, spi), ipsec_logsastr(sav)));