[src/netbsd-7]: src/doc Ticket #1412

[sborrill <sborrill%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/fabe7cf479d9
branches:  netbsd-7
changeset: 800236:fabe7cf479d9
user:      sborrill <sborrill%NetBSD.org@localhost>
date:      Thu Jun 29 12:25:04 2017 +0000

description:
Ticket #1412

diffstat:

 doc/CHANGES-7.2 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r 896fc115f95c -r fabe7cf479d9 doc/CHANGES-7.2
--- a/doc/CHANGES-7.2   Thu Jun 29 12:24:10 2017 +0000
+++ b/doc/CHANGES-7.2   Thu Jun 29 12:25:04 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.2,v 1.1.2.23 2017/06/21 17:27:15 snj Exp $
+# $NetBSD: CHANGES-7.2,v 1.1.2.24 2017/06/29 12:25:04 sborrill Exp $
 
 A complete list of changes from the NetBSD 7.1 release to the NetBSD 7.2
 release:
@@ -2388,3 +2388,14 @@
        Update expat to 2.2.1.
        [spz, ticket #1437]
 
+sys/external/bsd/ipf/netinet/fil.c             1.20
+sys/external/bsd/ipf/netinet/ip_state.c                1.7
+sys/external/bsd/ipf/netinet/ip_frag.c         1.5
+
+       Disconnect maintaining fragment state from keeping session state.
+       The user now must specify keep frags along with keep state to have 
+       ipfilter do what it did before, as documented in ipf.conf.5.
+       Free the right fragment. This will cause use after free issues and
+       eventually panic.
+       [christos, ticket #1412]
+