CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2017/05/28 10:55:54
Modified files:
sys/net : pf.c
Log message:
Limit the nested header chain for IPv6 extensions headers and for
authentication headers in the IPv4 case. This prevents spending
excessive cpu time on crafted packets.
OK henning@
