---
- branch: netbsd-6
  date: Tue Mar 13 17:47:14 UTC 2018
  files:
  - new: 1.29.2.1
    old: '1.29'
    path: src/sys/netipsec/ipsec_input.c
    pathrev: src/sys/netipsec/ipsec_input.c@1.29.2.1
    type: modified
  id: 20180313T174714Z.382c0aaed0cff518b84815b694e4265f75d9eafa
  log: "Pull up following revision(s) (requested by maxv in ticket #1536):\n\tsys/netipsec/ipsec_input.c:
    1.57-1.58\nExtend these #ifdef notyet. The m_copydata's in these branches are
    wrong,\nwe are not guaranteed to have enough room for another struct ip, and we\nmay
    crash here. Triggerable remotely, but after authentication, by sending\nan AH
    packet that has a one-byte-sized IPIP payload.\n--\nArgh, in my previous commit
    in this file I forgot to fix the IPv6\nentry point; apply the same fix there.\n"
  module: src
  subject: 'CVS commit: [netbsd-6] src/sys/netipsec'
  unixtime: '1520963234'
  user: snj