David Greenman b8e8c209c5 The ipt_ptr field is 1-based (see TCP/IP Illustrated, Vol. 1, pp. 91-95),
so it must be adjusted (minus 1) before using it to do the length check.
I'm not sure who to give the credit to, but the bug was reported by
Jennifer Dawn Myers <jdm@enteract.com>, who also supplied a patch. It
was also fixed in OpenBSD previously by andreas.gunnarsson@emw.ericsson.se,
and of course I did the homework to verify that the fix was correct per
the specification.
PR:	6738
1998-05-24 14:59:57 +00:00
..
1998-05-17 11:53:46 +00:00
1998-05-24 01:29:52 +00:00
1998-05-24 03:25:24 +00:00
1998-05-01 18:30:02 +00:00
1998-04-06 05:11:42 +00:00
1998-02-09 06:11:36 +00:00
1998-01-08 23:42:31 +00:00
1998-05-23 15:17:53 +00:00