CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/18 19:42:46
Modified files:
sys/arch/amd64/amd64: Tag: OPENBSD_7_8 aesni.c
sys/arch/octeon/dev: Tag: OPENBSD_7_8 octcrypto.c
Log message:
Fix overflow in hardware accelerated AES-GMAC crypto.
On amd64 using AES-NI or on octeon with crypto coprocessor, an
unauthenticated ESP packet that matches a configured AES-GMAC
security association could copy almost 64 KB of attacker-controlled
data into a 4096-byte kernel heap buffer.
from Acts1631; from bluhm@; OK visa@ hshoexer@
this is errata/7.8/074_aesgmac.patch.sig
