[src/netbsd-3-0]: src/doc tickets 1878, 1879

[bouyer <bouyer%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/119f81413dd2
branches:  netbsd-3-0
changeset: 579465:119f81413dd2
user:      bouyer <bouyer%NetBSD.org@localhost>
date:      Thu Nov 22 19:09:12 2007 +0000

description:
tickets 1878, 1879

diffstat:

 doc/CHANGES-3.0.4 |  25 ++++++++++++++++++++++++-
 1 files changed, 24 insertions(+), 1 deletions(-)

diffs (36 lines):

diff -r beef9710ab9b -r 119f81413dd2 doc/CHANGES-3.0.4
--- a/doc/CHANGES-3.0.4 Thu Nov 22 19:06:27 2007 +0000
+++ b/doc/CHANGES-3.0.4 Thu Nov 22 19:09:12 2007 +0000
@@ -1,4 +1,4 @@
-#      $NetBSD: CHANGES-3.0.4,v 1.1.2.14 2007/11/19 21:10:06 bouyer Exp $
+#      $NetBSD: CHANGES-3.0.4,v 1.1.2.15 2007/11/22 19:09:12 bouyer Exp $
 
 A complete list of changes from the NetBSD 3.0.3 release to the NetBSD 3.0.4
 release:
@@ -152,3 +152,26 @@
        heap corruption. This will hopefully fix PR bin/37236.
        [tron, ticket #1873]
 
+sys/netipsec/ipsec.c                           1.34 via patch
+sys/netipsec/ipsec_osdep.h                     1.21 via patch
+sys/netipsec/ipsec_output.c                    1.23 via patch
+sys/netipsec/xform_ah.c                                1.19 via patch
+sys/netipsec/xform_ipip.c                      1.18 via patch
+
+       The function ipsec4_get_ulp assumes that ip_off is in host order.
+       This results in IPsec processing that is dependent on protocol
+       and/or port can be bypassed.
+       Bug report, analysis and initial fix from Karl Knutsson.
+       Final patch and ok from degroote@
+       [adrianp, ticket #1878]
+
+sys/netinet6/ipcomp_input.c                    1.28
+
+       From FreeBSD:
+           In ipcomp6_input(), check 'md' not 'm' after a call to
+           m_pulldown(): 'm' may be a stale pointer at this point, and
+           we're interested in whether or not m_pulldown() failed.
+           Noticed by:     Coverity Prevent analysis tool
+       Should fix PR 37410.
+       [jdc, ticket #1879]
+