24/10/2026 14:35, Morten Brørup: > Four bug fixes and an enhancement. 3 comments from AI:
- The software checksum reads the header before validating its length. A truncated packet with an oversized IHL causes an out-of-bounds read. - CKSUM_NONE packets are accepted without rebuilding their checksum, so forwarding leaves it invalid. - Pre-existing: the EM path still calls send_single_packet() after validation frees the packet and returns BAD_PORT, causing an out-of-bounds array access.
