[src/netbsd-6]: src/doc Tickets #1546 and #1547

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/8929016555f9
branches:  netbsd-6
changeset: 777325:8929016555f9
user:      martin <martin%NetBSD.org@localhost>
date:      Thu May 03 14:58:46 2018 +0000

description:
Tickets #1546 and #1547

diffstat:

 doc/CHANGES-6.2 |  15 ++++++++++++++-
 1 files changed, 14 insertions(+), 1 deletions(-)

diffs (26 lines):

diff -r 2694a811f8fc -r 8929016555f9 doc/CHANGES-6.2
--- a/doc/CHANGES-6.2   Thu May 03 14:33:30 2018 +0000
+++ b/doc/CHANGES-6.2   Thu May 03 14:58:46 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.2,v 1.1.2.335 2018/04/18 07:19:23 msaitoh Exp $
+# $NetBSD: CHANGES-6.2,v 1.1.2.336 2018/05/03 14:58:46 martin Exp $
 
 A complete list of changes from the 6.1 release until the 6.2 release:
 
@@ -21233,3 +21233,16 @@
        Don't assume M_PKTHDR is set only on the first mbuf of the chain.
        Fix a pretty bad mistake (IPsec DoS).
        [maxv, ticket #1545]
+
+sys/netipsec/ipsec_output.c                    1.67,1.75 (patch)
+
+       compute_ipsec_pos: strengthen checks to avoid overruns,
+       allow the function to fail (and drop the misformed packet).
+       [maxv, ticket #1546]
+
+sys/kern/uipc_mbuf.c                           1.211
+
+       Modify m_defrag, so that it never frees the first mbuf of
+       the chain.
+       [maxv, ticket #1547]
+