CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/04 09:06:59
Modified files:
sbin/isakmpd : Tag: OPENBSD_8_0 crypto.c dpd.c exchange.c
exchange.h isakmpd.8 message.c udp.c x509.c
Log message:
using sizeof is recommended practice
from deraadt@
remove comma after final SEE ALSO reference
from jsg@
isakmpd(8): Fix various remotely triggerable crashes
- Only accept authenticated DPD notifications with a well-formed payload.
- Check the notify payload length against the SPI size.
- Fail AES key setup on invalid key lengths.
- Reject encrypted messages whose length is zero or not a multiple
of the cipher block size.
- Do not free the caller's certificate in x509_cert_get_key().
- Do not run exchanges that are already finalized.
from hshoexer@; with markus@, some input from tb@, OK deraadt@
this is errata/8.0/006_isakmpd.patch.sig
