CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/06/11 03:40:21
Modified files:
sbin/isakmpd : message.c
Log message:
isakmpd(8): Validate proposal and transform sizes
Check
- that a proposal payload fits within the outer SA payload,
- that the provided SPI and the following transform header fit within
the proposal, and
- transforms fit within the outer proposal payload.
It's already ensured that we never read outside the message. However,
within the message the mentioned payloads might be misinterpreted due
to malformed size values.
test & ok sthen
