src: Ticket #1545

[msaitoh <msaitoh%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7239b4b38737
branches:  netbsd-6-1
changeset: 318333:7239b4b38737
user:      msaitoh <msaitoh%NetBSD.org@localhost>
date:      Wed Apr 18 07:19:52 2018 +0000
description:
Ticket #1545

diffstat:

 doc/CHANGES-6.1.6 |  7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diffs (18 lines):

diff -r f14d6d1abfeb -r 7239b4b38737 doc/CHANGES-6.1.6
--- a/doc/CHANGES-6.1.6 Wed Apr 18 07:17:24 2018 +0000
+++ b/doc/CHANGES-6.1.6 Wed Apr 18 07:19:52 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-6.1.6,v 1.1.2.138 2018/04/10 17:45:17 snj Exp $
+# $NetBSD: CHANGES-6.1.6,v 1.1.2.139 2018/04/18 07:19:52 msaitoh Exp $
 
 A complete list of changes from the NetBSD 6.1.5 release to the NetBSD 6.1.6
 release:
@@ -15123,3 +15123,8 @@
        procs to avoid returning stale request data to the client.
        [christos, ticket #1528]
 
+sys/netipsec/ipsec_mbuf.c                      1.23-1.24
+
+       Don't assume M_PKTHDR is set only on the first mbuf of the chain.
+       Fix a pretty bad mistake (IPsec DoS).
+       [maxv, ticket #1545]