src: Ticket #1545

[msaitoh <msaitoh%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/17455fd567b9
branches:  netbsd-6-0
changeset: 318335:17455fd567b9
user:      msaitoh <msaitoh%NetBSD.org@localhost>
date:      Wed Apr 18 07:20:17 2018 +0000
description:
Ticket #1545

diffstat:

 doc/CHANGES-6.0.7 |  7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diffs (18 lines):

diff -r 5cb668ec604a -r 17455fd567b9 doc/CHANGES-6.0.7
--- a/doc/CHANGES-6.0.7 Wed Apr 18 07:17:48 2018 +0000
+++ b/doc/CHANGES-6.0.7 Wed Apr 18 07:20:17 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.0.7,v 1.1.2.141 2018/04/10 17:44:58 snj Exp $
+# $NetBSD: CHANGES-6.0.7,v 1.1.2.142 2018/04/18 07:20:17 msaitoh Exp $
 
 A complete list of changes from the NetBSD 6.0.6 release to the NetBSD 6.0.7
 release:
@@ -15454,3 +15454,8 @@
        procs to avoid returning stale request data to the client.
        [christos, ticket #1528]
 
+sys/netipsec/ipsec_mbuf.c                      1.23-1.24
+
+       Don't assume M_PKTHDR is set only on the first mbuf of the chain.
+       Fix a pretty bad mistake (IPsec DoS).
+       [maxv, ticket #1545]