CVS: cvs.openbsd.org: src

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/08/14 08:57:42

Modified files:
	sbin/isakmpd   : log.h monitor.c 

Log message:
isakmpd: Handle malformed MONITOR_BIND message

Using a stack allocated sockaddr_storage avoids the malloc(3)
entirely.  Add length checks for the payload sent by the child.

When a malicious child sends us a malformed message the privsep
protocol is out of sync.  Thus terminate gracefully with log_fatalx().

While there, attribute log_fatalx() with __dead.

Reported by Shibo, Hugo Systopia Team

ok markus@ tb@ deraadt@