[Bug 222160] Lack of TCP/UDP checksum recalculation in IPSec implementation

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Sep 9 04:20:52 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222160

            Bug ID: 222160
           Summary: Lack of TCP/UDP checksum recalculation in IPSec
                    implementation
           Product: Base System
           Version: 10.3-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: victor_volpe at bol.com.br

Bug 146190 shows that there is no code in FreeBSD kernel to handle TCP/UDP
checksums of packets protected by ESP.

Andrey V. Elsukov reported that the bugfix was merged in 11-STABLE, but this
need to be merged on all supported versions, like 10.3-RELEASE.

I'm using a kind of "butchering" in the UDP checksum function, to get rid of
checksum mismatch, but that is not the correct fix.

Please take actions about this ASAP!

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list