cvs commit: src/sys/contrib/pf/net pf.c

Mon Dec 13 00:02:37 PST 2004

dhartmei    2004-12-13 08:02:37 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/contrib/pf/net   pf.c 
  Log:
  MFC: IPv6 packets can contain headers (like options) before the TCP/UDP/
       ICMP6 header. pf finds the first TCP/UDP/ICMP6 header to filter by
       traversing the header chain. In the case where headers are skipped,
       the protocol checksum verification used the wrong length (included
       the skipped headers), leading to incorrectly mismatching checksums.
       Such IPv6 packets with headers were silently dropped.
  
  Revision  Changes    Path
  1.18.2.5  +7 -4      src/sys/contrib/pf/net/pf.c