CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2025/08/04 08:03:32
Modified files:
sys/netinet : ip_ah.c
Log message:
Avoid unsigned comparison in AH parsing.
The check (skip - sizeof(struct ip6_hdr) > 0) did not work as
expected because it is done as unsigned long. Instead of substraction,
add the small positive integers off and skip to size_t sizes. Then
do a comparison that does not rely on negative numbers.
CID 1594927
OK claudio@ tobhe@
