From owner-cvs-all  Sun May 24 08:05:15 1998
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id IAA27791
          for cvs-all-outgoing; Sun, 24 May 1998 08:05:15 -0700 (PDT)
          (envelope-from owner-cvs-all@FreeBSD.ORG)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA27785;
          Sun, 24 May 1998 08:05:14 -0700 (PDT)
          (envelope-from dg@FreeBSD.org)
From: David Greenman <dg@FreeBSD.ORG>
Received: (from dg@localhost)
	by freefall.freebsd.org (8.8.8/8.8.5) id IAA25045;
	Sun, 24 May 1998 08:00:07 -0700 (PDT)
Date: Sun, 24 May 1998 08:00:07 -0700 (PDT)
Message-Id: <199805241500.IAA25045@freefall.freebsd.org>
To: cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG
Subject: cvs commit: src/sys/netinet ip_input.c
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk

dg          1998/05/24 08:00:07 PDT

  Modified files:
    sys/netinet          ip_input.c 
  Log:
  The ipt_ptr field is 1-based (see TCP/IP Illustrated, Vol. 1, pp. 91-95),
  so it must be adjusted (minus 1) before using it to do the length check.
  I'm not sure who to give the credit to, but the bug was reported by
  Jennifer Dawn Myers <jdm@enteract.com>, who also supplied a patch. It
  was also fixed in OpenBSD previously by andreas.gunnarsson@emw.ericsson.se,
  and of course I did the homework to verify that the fix was correct per
  the specification.
  PR:	6738
  
  Revision  Changes    Path
  1.84      +3 -3      src/sys/netinet/ip_input.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message