CVS: cvs.openbsd.org: src

Alexander Bluhm <[email protected]>
Newsgroups gmane.os.openbsd.cvs
Message-ID <[email protected]> 
CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/07/12 15:41:08

Modified files:
	sys/crypto     : cryptosoft.c 

Log message:
IPComp decompression must not overflow mbuf cluster.

Check after decompressing an IPComp packet, that the content fits
into a mbuf cluster.  m_copyback() assumes that it can allocate a
single mbuf cluster to enlarge the mbuf chain.  That means the
decompressed data must not exceed MAXMCLBYTES.  Prevent panic:
m_clget: request for 67948 byte cluster.

reported by Homura Akemi, SecBuddyF, Tencent KeenLab; OK mvs@
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.