>sys/netinet6/ipcomp_core.c seems to use zlib::inflate* functions. >Should we do test not only PPP but also IPsec (IPcomp ?) ? >(I don't subscribe tech-security. Please cc: me in reply mail) yes. it seems that zlib 1.1.3 -> 1.1.4 transition made ipcomp behavior unstable. itojun