Tickets #1600, #1601, #1602 netbsd-7-1
authormartin <martin@NetBSD.org>
Thu, 03 May 2018 15:15:17 +0000
branchnetbsd-7-1
changeset 318708 086e58d65067
parent 318707 645b896dd3f3
child 319039 e43f58d30c92
Tickets #1600, #1601, #1602
doc/CHANGES-7.1.3
--- a/doc/CHANGES-7.1.3	Thu May 03 15:14:48 2018 +0000
+++ b/doc/CHANGES-7.1.3	Thu May 03 15:15:17 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.1.3,v 1.1.2.9 2018/04/17 15:38:39 martin Exp $
+# $NetBSD: CHANGES-7.1.3,v 1.1.2.10 2018/05/03 15:15:17 martin Exp $
 
 A complete list of changes from the NetBSD 7.1.2 release to the NetBSD 7.1.3
 release:
@@ -105,3 +105,20 @@
 	Fix a pretty bad mistake (IPsec DoS).
 	[maxv, ticket #1599]
 
+sys/netipsec/ipsec_output.c			1.67,1.75 (patch)
+
+	compute_ipsec_pos: strengthen checks to avoid overruns,
+	allow the function to fail (and drop the misformed packet).
+	[maxv, ticket #1600]
+
+crypto/external/bsd/heimdal/dist/kdc/connect.c	1.3
+
+	Avoid busy-waiting on a dead child.
+	[spz, ticket #1601]
+
+sys/kern/uipc_mbuf.c				1.211 (patch)
+
+	Modify m_defrag, so that it never frees the first mbuf of
+	the chain.
+	[maxv, ticket #1602]
+