[Bug 231045] ipv6 fragment reassembly broken

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=231045

--- Comment #3 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Fri Aug 31 08:37:15 UTC 2018
New revision: 338406
URL: https://svnweb.freebsd.org/changeset/base/338406

Log:
  frag6: Fix fragment reassembly

  r337776 started hashing the fragments into buckets for faster lookup.

  The hashkey is larger than intended. This results in random stack data being
  included in the hashed data, which in turn means that fragments of the same
  packet might end up in different buckets, causing the reassembly to fail.

  Set the correct size for hashkey.

  PR:           231045
  Approved by:  re (kib)
  MFC after:    3 days

Changes:
  head/sys/netinet6/frag6.c

-- 
You are receiving this mail because:
You are the assignee for the bug.