CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/08/14 08:57:42
Modified files:
sbin/isakmpd : log.h monitor.c
Log message:
isakmpd: Handle malformed MONITOR_BIND message
Using a stack allocated sockaddr_storage avoids the malloc(3)
entirely. Add length checks for the payload sent by the child.
When a malicious child sends us a malformed message the privsep
protocol is out of sync. Thus terminate gracefully with log_fatalx().
While there, attribute log_fatalx() with __dead.
Reported by Shibo, Hugo Systopia Team
ok markus@ tb@ deraadt@
