---
- branch: MAIN
  date: Wed Feb 21 16:55:53 UTC 2018
  files:
  - new: '1.67'
    old: '1.66'
    path: src/sys/netipsec/ipsec_output.c
    pathrev: src/sys/netipsec/ipsec_output.c@1.67
    type: modified
  id: 20180221T165553Z.82d73f4ef5240eb7e3492edd38a99b775ea5ccbd
  log: |
    Strengthen this check, to make sure there is room for an ip6_ext structure.
    Seems possible to crash m_copydata here (but I didn't test more than that).
  module: src
  subject: 'CVS commit: src/sys/netipsec'
  unixtime: '1519232153'
  user: maxv