Displaying 1 result from an estimated 1 matches for "v_irtualization".
Did you mean:
irtualization
2011 Apr 01
0
on "BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload"
...will throw away
the packet after that many iterations.
A mitigation change for the directly recursive case was just
committed to HEAD:
http://svn.freebsd.org/viewvc/base?view=revision&revision=220247
Similar patches for other branches (untested) are available:
HEAD and STABLE/8 (include the V_irtualization):
http://people.freebsd.org/~bz/20110401-02-ipcomp-head-8.diff
STABLE/7:
http://people.freebsd.org/~bz/20110401-03-ipcomp-7.diff
STABLE/6 (KAME + FAST, where the FAST is the same as STABLE/7):
http://people.freebsd.org/~bz/20110401-01-ipcomp-6.x.diff
More details may fol...