Date: Fri, 2 Apr 2010 18:15:23 +0000 (UTC) From: Ermal Luçi <eri@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r206111 - head/sys/netipsec Message-ID: <201004021815.o32IFNkN035017@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: eri Date: Fri Apr 2 18:15:23 2010 New Revision: 206111 URL: http://svn.freebsd.org/changeset/base/206111 Log: Fix a logic error in ipsec code that extracts information from the packets. Reviewed by: bz, mlaier Approved by: mlaier(mentor) MFC after: 1 month Modified: head/sys/netipsec/ipsec.c Modified: head/sys/netipsec/ipsec.c ============================================================================== --- head/sys/netipsec/ipsec.c Fri Apr 2 17:52:50 2010 (r206110) +++ head/sys/netipsec/ipsec.c Fri Apr 2 18:15:23 2010 (r206111) @@ -592,7 +592,7 @@ ipsec4_get_ulp(struct mbuf *m, struct se IPSEC_ASSERT(m->m_pkthdr.len >= sizeof(struct ip),("packet too short")); /* NB: ip_input() flips it into host endian. XXX Need more checking. */ - if (m->m_len < sizeof (struct ip)) { + if (m->m_len >= sizeof (struct ip)) { struct ip *ip = mtod(m, struct ip *); if (ip->ip_off & (IP_MF | IP_OFFMASK)) goto done;
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201004021815.o32IFNkN035017>