diff options
| author |   bluhm <bluhm@openbsd.org> | 2016-11-21 17:52:20 +0000 |
|---|---|---|
| committer | bluhm <bluhm@openbsd.org> | 2016-11-21 17:52:20 +0000 |
| commit | f0f63321f28f76a02dac8db178f3e8915d33fe2c (patch) | |
| tree | d809fb8b1b590c2fd6f52b48c4c64faf209e8791 /usr.sbin/switchd | |
| parent | Add ability to change media type (diff) | |
| download | wireguard-openbsd-f0f63321f28f76a02dac8db178f3e8915d33fe2c.tar.xz wireguard-openbsd-f0f63321f28f76a02dac8db178f3e8915d33fe2c.zip | |
Follow RFC 5722 more strictly when handling overlapping fragments
in pf. Drop the whole fragment state if IPv6 fragments appear which
have invalid length or fragment-offset or more-fragment-bit. In
IPv4 they are considered invalid and just dropped like before.
Found by Antonios Atlasis; OK sashan@ sthen@
Diffstat (limited to 'usr.sbin/switchd')
0 files changed, 0 insertions, 0 deletions