Igor Ostapenko 239e24eb0c pf: Handle (*m0)->m_len < sizeof(struct ip) case ... if_enc(4) can pass IPsec payload to pfil(9) with the outer header or without it. In case of a small packet like ICMP, when mbuf cluster is not used, everything works fine. Otherwise, the first mbuf in a chain has m_len == 0 if it is asked to strip the outer header. pf was not handling such case, and erroneous reading of the outer IP header led to unexpected behavior. Reviewed by: kp, glebius Differential Revision: https://reviews.freebsd.org/D45780		2024-07-02 14:43:46 +02:00
..
common	vnet tests: check for if_bridge.ko	2024-06-04 22:16:56 +02:00
ipfw
pf	pf: Handle (*m0)->m_len < sizeof(struct ip) case	2024-07-02 14:43:46 +02:00
Makefile	Remove $FreeBSD$: one-line sh pattern	2023-08-16 11:55:03 -06:00
Makefile.depend	Remove $FreeBSD$: one-line sh pattern	2023-08-16 11:55:03 -06:00