PR/60669 CVS commit: src/sys/netipsec

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

The following reply was made to PR kern/60669; it has been noted by GNATS.

From: "Taylor R Campbell" <riastradh%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/60669 CVS commit: src/sys/netipsec
Date: Sat, 19 Sep 2026 16:49:28 +0000

 Module Name:	src
 Committed By:	riastradh
 Date:		Sat Sep 19 16:49:28 UTC 2026
 
 Modified Files:
 	src/sys/netipsec: key.c
 
 Log Message:
 ipsec: Fix fencepost error in policy parsing.
 
 If there are no addresses appended, the input buffer length may
 rightly match sizeof(*xisr) exactly.
 
 Should fix some of the IPsec tests I just broke!
 
 PR kern/60669: netipsec key_sp2msg buffer overrun
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.289 -r1.290 src/sys/netipsec/key.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.