OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Claudio Jeker (claudiocvs.openbsd.org)
Date: Wed Oct 28 2009 - 16:20:16 CDT

CVSROOT: /cvs
Module name: src
Changes by: claudiocvs.openbsd.org 2009/10/28 15:20:16

Modified files:
        sys/netinet6 : Tag: OPENBSD_4_5 ip6_output.c

Log message:
MFC rev. 1.108 of ip6_output.c by deraadt:

*NULL store in IP_AUTH_LEVEL, IP_ESP_TRANS_LEVEL, IP_ESP_NETWORK_LEVEL,
IP_IPCOMP_LEVEL found by Clement LECIGNE, localhost root exploitable on
userland/kernel shared vm machines (ie. i386, amd64, arm, sparc (but not
sparc64), sh, ...) on OpenBSD 4.3 or older
copy of the ipv4 bug, spotted by claudio