Bjoern A. Zeeb dc49da9761 Do not allow recursive RFC3173 IPComp payload. ...

Reviewed by:	Tavis Ormandy (taviso cmpxchg8b.com)
MFC after:	5 days
Security:	CVE-2011-1547

2011-04-01 14:13:49 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipip_var.h

…

ipsec6.h

…

ipsec_input.c

Fix typo in comment.

2010-10-25 16:11:37 +00:00

ipsec_mbuf.c

…

ipsec_output.c

Fix two SA refcount:

2011-03-31 13:14:24 +00:00

ipsec.c

Announce both IPsec and UDP Encap (NAT-T) if available for

2010-10-30 18:52:44 +00:00

ipsec.h

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00

key_debug.c

…

key_debug.h

…

key_var.h

…

key.c

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00

key.h

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00

keydb.h

Make the IPsec SADB embedded route cache a union to be able to hold both the

2010-10-23 20:35:40 +00:00

keysock.c

After some off-list discussion, revert a number of changes to the

2010-11-22 19:32:54 +00:00

keysock.h

…

xform_ah.c

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00

xform_esp.c

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00

xform_ipcomp.c

Do not allow recursive RFC3173 IPComp payload.

2011-04-01 14:13:49 +00:00

xform_ipip.c

…

xform_tcp.c

…

xform.h

Optimisation in IPSEC(4):

2011-03-31 15:23:32 +00:00