[Midnightbsd-cvs] [MidnightBSD/src] 1132bf: netipsec: validate PF_KEY socket address lengths

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 1132bf4a3d6ef46f0fc42f0cbdc9c48522f5a6e4
      https://github.com/MidnightBSD/src/commit/1132bf4a3d6ef46f0fc42f0cbdc9c48522f5a6e4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M sys/netipsec/key.c

  Log Message:
  -----------
  netipsec: validate PF_KEY socket address lengths

Validate new PF_KEY security association addresses before copying them into fixed-size index fields.  Convert the index setup macros to checked helpers so future callers retain the same bound invariant.

This ports FreeBSD src commits cba481a7bff2 and fffaf471280b.

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 950fb32dcefbc94fee97253c77818106a0ac3f3e
      https://github.com/MidnightBSD/src/commit/950fb32dcefbc94fee97253c77818106a0ac3f3e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-17 (Mon, 17 Aug 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note PF_KEY socket address fix

AI-Assisted-by: OpenAI Codex (GPT-5)
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/src/compare/6a27a477ec74...950fb32dcefb

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications