CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2022/02/20 22:19:07
Modified files: sys/net : if_vxlan.c Log message: in input, clear the address union before putting an ipv4 address in it. the whole vxlan address is used for lookups in the RB tree, so any garbage on the stack where the address sits could confuse the lookup. it looks like i was lucky before, but if you receive vxlan over ipsec you are less lucky. found by and fix tested by jason tubnor.