cvs commit: src/sys/contrib/pf/net pf.c
dhartmei at FreeBSD.org
Mon Dec 13 00:02:37 PST 2004
dhartmei 2004-12-13 08:02:37 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_5)
MFC: IPv6 packets can contain headers (like options) before the TCP/UDP/
ICMP6 header. pf finds the first TCP/UDP/ICMP6 header to filter by
traversing the header chain. In the case where headers are skipped,
the protocol checksum verification used the wrong length (included
the skipped headers), leading to incorrectly mismatching checksums.
Such IPv6 packets with headers were silently dropped.
Revision Changes Path
188.8.131.52 +7 -4 src/sys/contrib/pf/net/pf.c
More information about the cvs-src