[Midnightbsd-cvs] [MidnightBSD/src] 33c18e: netipsec: validate PF_KEY socket address lengths

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 33c18eee95512aa9c86f46221bc8c45326749aa5
      https://github.com/MidnightBSD/src/commit/33c18eee95512aa9c86f46221bc8c45326749aa5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M sys/netipsec/key.c

  Log Message:
  -----------
  netipsec: validate PF_KEY socket address lengths

Validate new PF_KEY security association addresses before copying them into fixed-size index fields.  Convert the index setup macros to checked helpers so future callers retain the same bound invariant.

This ports FreeBSD src commits cba481a7bff2 and fffaf471280b.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 3d006548093a5588ec5499db3e5da592aac9c8be
      https://github.com/MidnightBSD/src/commit/3d006548093a5588ec5499db3e5da592aac9c8be
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note PF_KEY socket address fix

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/src/compare/b283db294471...3d006548093a

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications