[src/netbsd-7-1]: src/doc Ticket #1412

[sborrill <sborrill%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/0c5d02ff03a5
branches:  netbsd-7-1
changeset: 800750:0c5d02ff03a5
user:      sborrill <sborrill%NetBSD.org@localhost>
date:      Wed Jul 12 18:52:40 2017 +0000

description:
Ticket #1412

diffstat:

 doc/CHANGES-7.1.1 |  13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)

diffs (24 lines):

diff -r b0f1b5d81a26 -r 0c5d02ff03a5 doc/CHANGES-7.1.1
--- a/doc/CHANGES-7.1.1 Wed Jul 12 18:50:44 2017 +0000
+++ b/doc/CHANGES-7.1.1 Wed Jul 12 18:52:40 2017 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: CHANGES-7.1.1,v 1.1.2.15 2017/07/12 15:36:25 martin Exp $
+# $NetBSD: CHANGES-7.1.1,v 1.1.2.16 2017/07/12 18:52:40 sborrill Exp $
 
 A complete list of changes from the NetBSD 7.1 release to the NetBSD 7.1.1
 release:
@@ -1697,3 +1697,14 @@
        Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.
        [christos, ticket #1453]
 
+sys/external/bsd/ipf/netinet/fil.c             1.20
+sys/external/bsd/ipf/netinet/ip_state.c                1.7
+sys/external/bsd/ipf/netinet/ip_frag.c         1.5
+
+       Disconnect maintaining fragment state from keeping session state.
+       The user now must specify keep frags along with keep state to have 
+       ipfilter do what it did before, as documented in ipf.conf.5.
+       Free the right fragment. This will cause use after free issues and
+       eventually panic.
+       [christos, ticket #1412]
+