diff options
| author |   bluhm <bluhm@openbsd.org> | 2011-02-01 16:10:31 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2011-02-01 16:10:31 +0000 |
| commit | 476042822b075f9903b1248ddc306b5272de0ea1 (patch) | |
| tree | 749cecae317e086acf1c04b9c652ec7d105d23ed /usr.bin/diff/diff.1 | |
| parent | sync from mirrors.dat (diff) | |
| download | wireguard-openbsd-476042822b075f9903b1248ddc306b5272de0ea1.tar.xz wireguard-openbsd-476042822b075f9903b1248ddc306b5272de0ea1.zip | |
The check for invalid IPv6 fragment size in pf_normalize_ip6() was
wrong. As an effect small valid fragmented packets got dropped and
some invalid fragmented packets were passed. plen is the payload
lenght of the ipv6 packet without the ipv6 header. off is relative
to the whole packet including the ipv6 header. Add sizeof(struct
ip6_hdr) in the calculation.
ok henning@ markus@
Diffstat (limited to 'usr.bin/diff/diff.1')
0 files changed, 0 insertions, 0 deletions