Subject: Possible crash in ip_reass_ttl_decr()
To: None <tech-net@NetBSD.org>
From: jean-mickael guerin <jean-mickael.guerin@6WIND.com>
List: tech-net
Date: 04/01/2004 20:15:05
Hello,

I got a kernel panic in ip_reass_ttl_decr() when my NetBSD-1.6ZI 
receives IP fragments. I think it is related to the loop
for (i = IPFRAGTTL, median = 0; i >= 0; i--) {

where i was declared unsigned. I use following fix that seems to work:

<       u_int i, nfrags, median;
---
 >       int i;
 >       u_int nfrags, median;

Jean-Mickael