opnsense-src/sys/netipsec
Tobias Heider 0dab21248b pfkey: Fix some checks in kdebug_sadb()
Besides not doing any sufficient check that the length of a parsed
message is not bigger than the actual allocated buffer, kdebug_sadb()
incorrectly compares ext->sadb_ext_len, the extension payload size in 8
byte chunks, with tlen, which is the full message payload size in bytes.

This should compare PFKEY_UNUNIT64(ext->sadb_ext_len) with tlen instead.

PR:		277456
MFC after:	2 weeks
2024-12-04 16:22:50 +00:00
..
ah.h
ah_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
esp.h
esp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipcomp.h
ipcomp_var.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipsec.c netipsec: move declaration of the sysctl net.inet{,6}.ipsec nodes to header 2024-07-21 11:53:19 +03:00
ipsec.h netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
ipsec6.h
ipsec_input.c
ipsec_mbuf.c
ipsec_mod.c
ipsec_offload.c net: Include private header in more needed places 2024-11-13 14:30:59 -05:00
ipsec_offload.h ipsec_offload: add ipsec_accel_drv_sa_lifetime_fetch() 2024-08-20 15:42:13 +03:00
ipsec_output.c ipsec: fix IPv6 over IPv4 tunneling. 2024-11-25 20:42:00 +03:00
ipsec_pcb.c
ipsec_support.h
key.c ipsec: Drain async ipsec_offload work when destroying a vnet 2024-09-04 14:28:28 +00:00
key.h
key_debug.c pfkey: Fix some checks in kdebug_sadb() 2024-12-04 16:22:50 +00:00
key_debug.h
key_var.h
keydb.h
keysock.c
keysock.h
subr_ipsec.c
udpencap.c
xform.h
xform_ah.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_esp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_ipcomp.c netipsec: add probe points for the ipsec/esp/ah/ipcomp counters 2024-08-28 12:02:45 +02:00
xform_tcp.c