CVS commit: [netbsd-2-0] src

[Manuel Bouyer <bouyer%netbsd.org@localhost>]

Module Name:    src
Committed By:   bouyer
Date:           Mon Jun  4 19:24:36 UTC 2007

Modified Files:
        src/sbin/sysctl [netbsd-2-0]: sysctl.8
        src/sys/netinet6 [netbsd-2-0]: ip6_input.c ip6_var.h route6.c

Log Message:
Pull up following revision(s) (requested by adrianp in ticket #11330):
        sys/netinet6/ip6_input.c: revision 1.102 via patch
        sys/netinet6/route6.c: revision 1.18 via patch
        sys/netinet6/ip6_var.h: revisions 1.41-1.42 via patch
        sbin/sysctl/sysctl.8: patch
Disable processing of routing header type 0 packets since they can be used
of DoS attacks. Provide a sysctl to re-enable them (net.inet6.ip6.rht0).
Information from:
        http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf


To generate a diff of this commit:
cvs rdiff -r1.111.2.1 -r1.111.2.2 src/sbin/sysctl/sysctl.8
cvs rdiff -r1.73.2.2 -r1.73.2.3 src/sys/netinet6/ip6_input.c
cvs rdiff -r1.32 -r1.32.2.1 src/sys/netinet6/ip6_var.h
cvs rdiff -r1.13 -r1.13.4.1 src/sys/netinet6/route6.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.